21klwin Privacy Policy – Protecting the Personal Data of Malaysian Players

1. Information We Collect

21klwin collects various types of information as you interact with our platform. Here is a comprehensive overview of the data we collect and why:

1.1 Registration and Account Information

When you register an account at 21klwin, we collect the following information:

• Full name as it appears on your identity document
• An active and reachable email address
• Mobile phone number
• Date of birth (for age verification)
• Current residential address
• Username and chosen password (stored in encrypted form)

1.2 Identity Verification Information (KYC)

As an industry-compliant platform, 21klwin requires identity verification before processing your first withdrawal or when unusual activity is detected. Documents that may be requested include:

• Copy of identity card (MyKad) or valid passport
• Proof of address such as a recent bank statement or utility bill
• Payment method documents used

1.3 Financial and Transaction Information

Every deposit and withdrawal transaction on the 21klwin platform is recorded for security, compliance, and dispute resolution purposes. This information includes the transaction amount, payment method used, date and time of the transaction, and processing status.

1.4 Platform Usage Data

We collect data on how you use the 21klwin platform, including gaming records, bets placed, pages visited, session duration, device and web browser used, and your IP address. This data is used solely to improve the user experience and detect potential fraudulent activity.

2. How We Use Your Information

2.1 Service Provision and Management

The primary use of data collected by 21klwin is to enable us to provide platform services to you — encompassing account verification and management, processing deposits and withdrawals, handling gaming and wagering, and managing bonus and promotion programmes.

2.2 Security and Fraud Prevention

Your data helps us identify and prevent fraudulent activity, money laundering, and other security threats. This includes monitoring unusual transaction patterns, verifying your identity when you log in from a new location, and analysing suspicious in-game behaviour.

2.3 Communications with You

We use your contact information to send account-related notifications such as transaction confirmations and security alerts. With your consent, we also send information about the latest 21klwin promotions and offers.

2.4 Platform Improvement

The usage data collected helps the 21klwin technical team understand how players interact with the platform, identify areas for improvement, and ensure a consistently smooth and enjoyable gaming experience.

3. Data Sharing and Disclosure

3.1 Service Partners

21klwin works with select third-party service providers to manage certain aspects of our platform, including payment processors, live casino and game providers, and technical analytics platforms. All these partners are bound by strict data protection agreements and may only use your data for specified purposes.

3.2 Legal Requirements

21klwin may be required to disclose your personal data to relevant authorities when mandated by law, court order, or regulatory body directive. This includes investigations related to fraud, money laundering, or other illegal activities.

3.3 Corporate Transfers

In the event of a merger, acquisition, or transfer of 21klwin's business assets, player data may be transferred as part of that process. In such circumstances, the receiving party will be bound by a privacy policy that provides at least the same level of protection we offer today.

4. Data Security and Protection

4.1 Technical Security Measures

21klwin invests seriously in security infrastructure to protect our players' data. The security measures we have in place include:

• 256-bit SSL encryption for all data communications
• Password storage using strong hashing algorithms
• Multi-layered firewalls and intrusion detection systems
• Continuous 24/7 security monitoring
• Regular penetration testing by independent security experts
• Regular and secure data backup protocols

4.2 Access Controls

Access to players' personal data within 21klwin's internal systems is limited to staff who genuinely need it to perform their duties. All access is logged and monitored. Staff with access to sensitive data undergo background checks and regular data security awareness training.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and enhance your browsing experience. 21klwin uses cookies for the purposes set out below.

5.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality, including authentication of your login session. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players use the platform so we can improve the user experience.
• Functional Cookies: Remembers your preferences and settings such as language and display preferences.
• Analytics Cookies: Collects aggregated usage data to help us understand platform usage patterns.

6. Your Rights as a Data Subject

As a 21klwin player, you have the following rights regarding your personal data:

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This request will be processed within 30 business days. Contact the 21klwin customer support team to submit a data access request.

6.2 Right of Rectification

If the personal data we hold is inaccurate or out of date, you have the right to request that we correct or update it. For basic account information such as your address and phone number, you can update it yourself through your account settings.

6.3 Right of Erasure

In certain circumstances, you may request the deletion of your personal data from our systems. However, some data may need to be retained to meet legal or contractual obligations, such as financial records that must be kept in accordance with applicable legislation.

6.4 Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.

7. Data Retention and Deletion

7.1 Data Retention Period

21klwin retains your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Generally:

• Active account data: For the entire duration the account remains active
• KYC data and financial records: At least 7 years after account closure
• Log and security data: Between 1 and 3 years
• Customer support communication data: 2 years

7.2 Data Deletion After Account Closure

When you close your 21klwin account, we will delete or anonymize personal data that is no longer needed within a reasonable timeframe. Data that must be retained for legal or compliance purposes will be stored securely with restricted access until the end of its retention period.

8. Changes to the Privacy Policy

8.1 Right to Update

21klwin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technological developments, or updated legal requirements. Whenever the Privacy Policy is updated, the latest revision date will be displayed at the top of this page.

8.2 Notification of Changes

For significant changes to how we handle your personal data, 21klwin will notify you via your registered email or a prominent notice on the platform before the changes take effect. Continued use of the platform after the effective date of the changes constitutes acceptance of the updated Privacy Policy.

8.3 Malaysia PDPA Compliance

The 21klwin Privacy Policy upholds the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring all our data management practices align with the requirements and spirit of applicable data protection laws.