Privacy Policy

Kaki21 Privacy Policy – Protection of Your Personal Data

Your personal data is a trust we uphold with full responsibility. This Privacy Policy transparently explains how kaki21 collects, uses, stores, and protects your information in accordance with the Malaysian Personal Data Protection Act 2010.

Last Updated: January 2026
PDPA 2010 Compliance 256-bit SSL Encryption No Data Selling

Kaki21's Privacy Commitment to You

Six core principles that underpin how kaki21 handles the personal data of every member.

Highest-Level Data Encryption

All data transmitted between your device and kaki21's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions.

Full PDPA 2010 Compliance

Kaki21 operates in full compliance with Malaysia's Personal Data Protection Act 2010. All data collection and usage processes adhere to the applicable legal requirements.

Full Control in Your Hands

You have the right to access, correct, delete, and control how your data is used. All data rights requests are processed within the stipulated timeframe at no charge.

Your Data Is Never Sold

Kaki21 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data remains yours.

Responsible Data Storage

Your data is retained only for as long as required by legal and operational needs. After that period, it is securely deleted in accordance with industry-standard procedures.

Data Breach Notification

In the event of any security incident involving your data, kaki21 will notify you within the timeframe required by law and take immediate action to protect your interests.

Note: This Privacy Policy applies to all members and users of the kaki21 platform, including the kaki21.win website and the kaki21 mobile app. By using our platform, you agree to the privacy practices described here.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account and use the kaki21 platform, we collect information you provide voluntarily. This includes your full name, date of birth, identity card number (MyKad), residential address, mobile number, email address, and bank account details for deposit and withdrawal purposes. This information is required so we can verify your identity, meet legal obligations, and deliver the best possible service.

During the identity verification (KYC) process, we may request copies of your identification documents and proof of address. These documents are collected solely for anti-money laundering compliance and identity verification purposes, and are handled with care by trained personnel.

1.2 Information Collected Automatically

When you browse or use the kaki21 platform, our systems automatically collect technical information to ensure a smooth and secure experience. This includes:

  • IP address and geographic location of your device
  • Device type, operating system, and browser version
  • Login activity and game session records
  • Pages visited, time spent on the platform, and usage patterns
  • Transaction data including deposits, withdrawals, and game history
  • Cookie and device identifier information

Collecting this technical information helps us detect fraudulent activity, maintain account security, and continuously improve user experience.

1.3 Information from Third Parties

In certain circumstances, we may receive information about you from trusted third parties, such as identity verification service providers, payment providers, and regulatory bodies. This information is used solely to complete the verification process and ensure compliance with applicable laws.

2. How We Use Your Data

Kaki21 uses your personal data only for legitimate, clearly stated purposes. We do not use your data for any other purpose without obtaining your prior consent. The primary purposes for which your data is used are as follows:

Purpose of Use Legal Basis
Member registration and account management Contract performance
Processing of deposits and withdrawals Contract performance
Identity verification (KYC) and fraud prevention Legal obligation
Service communications and customer support Legitimate interest
Platform enhancement and user experience improvement Legitimate interest
Sending promotional offers (with your consent) Consent
Compliance with legal requirements and reporting obligations Legal obligation

If you have previously consented to receive marketing communications but no longer wish to do so, you may withdraw that consent at any time through your account settings or by contacting our support team.

3. Data Sharing with Third Parties

Kaki21 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, we do share your data with certain parties where necessary to deliver our services effectively and to comply with applicable laws.

Third parties that may receive your data include:

  • Integrated payment providers: FPX, Touch 'n Go eWallet, GrabPay, and other financial service providers that process your transactions — data is shared solely to enable secure payment processing.
  • Game providers: Companies such as Pragmatic Play, Evolution Gaming, and other providers that supply games on the kaki21 platform — minimal data is shared to enable seamless game access.
  • Identity verification services: Third-party KYC providers that help us verify member identities in accordance with compliance requirements.
  • Regulatory authorities: Government agencies or law enforcement bodies when lawfully required under Malaysian law.

All third parties we work with are bound by strict data confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements.

kaki21 guarantees: We never share your data with third-party advertisers, data brokers, or external marketing companies for advertising purposes unrelated to kaki21 services.

4. Data Security

Protecting your personal data is kaki21's highest priority. We implement multiple layers of technical and organisational security controls to ensure your data is always protected against unauthorised access, loss, alteration, or accidental disclosure.

Key security measures we implement include:

  • 256-bit SSL encryption for all data transmissions between your browser and kaki21's servers
  • Database-level data encryption for sensitive information such as bank details and passwords
  • Two-factor authentication (2FA) available for all member accounts
  • 24/7 monitoring by an experienced cybersecurity team
  • Regular security audits by independent third-party experts
  • Strict internal access controls — only staff who require it may access member data
  • Servers hosted in certified data centres with multi-layered physical protection

Security Notice: While we take all reasonable precautions, no security system is entirely foolproof. You also play an important role — make sure your password is strong, unique, and never shared with anyone.

5. Cookies and Tracking Technologies

Kaki21 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collect information on how you use the platform to help us improve performance and user experience.
  • Functional Cookies: Store your preferences such as language, display settings, and login information to deliver a more personalised experience.
  • Analytics Cookies: Help us understand aggregated, anonymised platform usage patterns for continuous improvement.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the overall functionality of the kaki21 platform.

6. Your Rights Under PDPA 2010

As a kaki21 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

👁️
Right to Access

Request a copy of the personal data we hold about you

✏️
Right to Rectification

Correct inaccurate or incomplete data

🗑️
Right to Erasure

Request deletion of your data under certain circumstances

🚫
Right to Object

Object to the processing of your data for direct marketing purposes

📦
Right to Portability

Receive your data in a machine-readable format

⏸️
Right to Restrict

Request restriction of data processing in specific situations

To exercise any of the rights above, contact our privacy team by email at [email protected] or via the platform's live chat. We will process your request within 30 business days of receipt. All data rights requests are handled free of charge except in specific circumstances provided for by law.

7. Data Retention

Kaki21 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

Generally, active account data is retained for the duration of your account's activity plus the minimum retention period required by law for compliance and audit purposes. Financial transaction data is retained for at least seven years in line with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

Once the applicable retention period expires, your data will be securely deleted or anonymised in accordance with approved industry-standard procedures.

8. Third-Party Links

The kaki21 platform may contain links to third-party websites or services in certain contexts, such as game provider pages. This Privacy Policy applies solely to the kaki21 platform and does not cover the privacy practices of those third-party websites.

Kaki21 is not responsible for the content or privacy practices of third-party websites. We encourage you to read the privacy policy of each website you visit separately before providing any personal information.

9. Changes to This Privacy Policy

Kaki21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you via your registered email or through a prominent notice displayed on our platform.

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last reviewed. Continued use of the kaki21 platform after any changes take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

10. How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the kaki21 Data Privacy Officer through the following channels:

We are committed to addressing every enquiry and complaint seriously and in a timely manner. If you are dissatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set out under PDPA 2010.

kaki21's commitment: Your privacy is not merely a legal obligation to us — it is a core value of the kaki21 platform. We are committed to continuously improving our data protection practices to earn and maintain your trust as a valued member.

🔒

Your Data Is Safe. Join kaki21 with Confidence.

With industry-grade data protection and full PDPA 2010 compliance, you can play at kaki21 with complete peace of mind. Register today and enjoy a safe, rewarding gaming experience.

PDPA 2010 Compliance 256-bit SSL No Data Selling
Bahasa Melayu