21huat Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

21huat operating under the domain 21huat.click, is the data controller responsible for processing the personal information of all members and users of our platform. We understand that when you entrust us with your personal information — including your name, phone number, and financial details — you are placing a great deal of trust in us.

That trust is not something we take lightly. This Privacy Policy is written in plain, straightforward language — not confusing legal jargon — so that every member 21huat in Malaysia truly understand what happens with their data. We believe transparency is the foundation of a healthy relationship between our platform and our player community.

This policy applies to all personal information collected through the 21huat.click website, our mobile application (if applicable), email communications, and any other interactions between you and the 21huat.

21huat collects personal information from you through a number of different means. Below is a comprehensive overview of the types of data we may collect:

We do not collect sensitive data categories such as medical information, religious beliefs, or sexual orientation. All data collected by 21huat is limited to what is necessary to operate our platform services safely and effectively.

The personal data you provide to 21huat is used exclusively for the following purposes. We do not use your data for any other purpose without first obtaining your additional consent:

• Verifying your identity during account registration and the KYC (Know Your Customer) process to ensure the 21huat platform is not misused.
• Processing deposits and withdrawals in Malaysian Ringgit (RM) via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and other supported local methods.
• Providing gaming services including Blackjack, Baccarat, live casino, Sports Betting on Malaysia Super League football, BWF badminton, e-sports, and more on the 21huat platform.
• Communicating with you regarding your account, transactions, platform updates, promotions (where you have given consent), and responses to customer support enquiries.
• Preventing fraud and misuse platform through suspicious activity monitoring, duplicate account detection, and compliance with anti-money laundering (AML) legal requirements.
• Improving the platform through anonymous usage data analysis to understand how Malaysian players use 21huat and identify areas for improvement.
• Complying with legal obligations including the retention of financial records, responding to valid court orders, and cooperating with relevant authorities when required by law.

21huat only processes your personal data where there is a lawful basis for doing so. The following bases apply to our data processing:

• Contractual necessity — processing is required to provide the services you request when registering an account and using the 21huat platform.
• Legitimate interests — processing is necessary for the purposes of our legitimate interests, such as fraud prevention, enhancing platform security, and ensuring a better user experience.
• Legal obligations — processing is required to comply with laws and regulations applicable to 21huat's operations, including anti-money laundering requirements.
• Consent — for specific purposes such as direct marketing, we rely on your explicit consent, which may be withdrawn at any time.

21huat does not sell your personal data to anyone. Only in the following limited situations may your information be shared with selected third parties:

• Payment processing providers — information required to process your transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX is shared with the respective service providers. This sharing is strictly limited to what is necessary for payment purposes only.
• Gaming platform providers — third-party game providers that supply Live Casino or other games on the 21huat platform may need to receive basic information such as player IDs for purely technical purposes.
• Relevant authorities — 21huat will disclose personal information where required to do so by a valid court order, law enforcement authorities, or relevant regulatory bodies in Malaysia.
• Technical service providers — companies that assist us in operating the technical infrastructure of the 21huat platform, such as cloud computing and server hosting services, may have limited access to data within the scope of their work. All such providers are bound by strict confidentiality agreements.

In all of the above cases, 21huat ensuring that all parties who receive your data operate under strict data protection agreements and use that data solely for authorised purposes. We never grant data access to third-party advertisers or marketers without your explicit consent.

The security of your personal data is the top priority in our operations 21huat. We invest in the latest security infrastructure and protocols to ensure your data remains protected at all times.

• Data encryption in transit — all communication between your device and 21huat's servers is protected by 256-bit TLS/SSL protocols, ensuring no data can be intercepted in transit.
• Data encryption at rest — sensitive data such as passwords and financial information is stored in encrypted form in our database. Passwords are never stored as plain text.
• Strict access controls — only 21huat staff with a legitimate operational need may access member personal data, and all such access is regularly monitored and audited.
• Intrusion detection system — 21huat's infrastructure is equipped with systems that continuously monitor for unauthorised access attempts and immediately alert our security team.

How Long Is Your Data Retained?

21huat retains your personal data for as long as necessary for the purpose it was collected, or to fulfil our legal obligations. In general:

• Active account data — retained for the duration of the account and for a defined period following account closure, in compliance with legal obligations.
• Financial transaction records — retained in accordance with applicable Malaysian financial and taxation regulations.
• Support communication data — retained for as long as necessary to resolve disputes and improve service quality.
• Once the retention period expires, data will be securely deleted or anonymised.

Platform 21huat uses cookies and similar tracking technologies to enhance your experience. Below is an explanation of the types of cookies used:

You can manage your cookie settings through your web browser preferences. However, disabling essential cookies may affect your ability to log in or use certain features on the platform. 21huat.

As a member 21huat, you have certain rights regarding your personal data. We take every request relating to these rights seriously and endeavour to process them within a reasonable timeframe.

Platform 21huat is STRICTLY PROHIBITED for use by individuals under the age of 18. We do not knowingly collect or store personal information from children or minors.

If we discover that we have collected personal information from an individual under the age of 18 without appropriate age verification, we will take immediate steps to delete that information and close the account in question. If you believe a minor has registered for or is using the 21huat platform, please contact us at support@21huat.click without delay.

Processing of financial transactions at 21huat involves handling sensitive information. We take additional measures to ensure the security of your financial data:

• All deposits and withdrawals at 21huat are processed in Malaysian Ringgit (RM) via verified payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). We do not store your credit card numbers or full bank account details in our systems.
• Complete transaction records are stored in encrypted format and are accessible only to authorised 21huat finance and security personnel, as well as legal authorities when required by law.
• A real-time fraud monitoring system operating 24/7 tracks all transactions for suspicious patterns to safeguard your funds and financial data.
• 21huat complies with Malaysia's Anti-Money Laundering (AML) legal requirements, which may require us to verify the source of funds for transactions exceeding certain thresholds.

21huat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or updated platform features. Whenever we make a material amendment, we will:

• Updating the "Last updated" date at the top of this document.
• Displaying clear notices on the 21huat platform regarding changes that have been made.
• Sending email notifications to all active members regarding significant changes to how their data is used.

We encourage you to review this Privacy Policy periodically to stay informed about how 21huat protect your information. Continued use of the platform after any amendment comes into effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 21huat handles your personal data, do not hesitate to get in touch with us:

• Privacy Email: support@21huat.click — Please include "Privacy Request" in your email subject line for a faster response.
• Live Chat: Accessible directly within the 21huat platform, available 24/7 with a Malay-speaking support team.
• Response Time: We aim to respond to all privacy-related enquiries within 7 business days, and to more complex requests within 30 business days.

We value every privacy-related inquiry and feedback, as it helps us continuously improve our policies and practices to better protect all members. 21huat in Malaysia more effectively.