21klwin Privacy Policy – Our Commitment to Privacy & Data Protection for Malaysian Users

This Privacy Policy explains how 21klwin ("We", "Platform") collects, uses, discloses, stores, and protects your personal data when you use our website, mobile app, or any services we provide.

We know that your trust in 21klwin depends largely on the confidence that your personal data is handled transparently, responsibly, and securely. That is why we have written this Privacy Policy in plain, easy-to-understand language — not confusing legal jargon.

This Privacy Policy applies to all 21klwin platform users regardless of the access method used — whether via a web browser on a computer, the Android mobile app, or the iOS app. By using our platform, you agree to the collection and use of data as described in this document.

21klwin collects personal data from you through several different means. Below are the categories of data we collect:

Data You Provide Directly:

• Registration information: full name, date of birth, phone number, email address
• Identity verification documents (KYC): copy of national ID, passport, or recognised document
• Payment information: details of payment methods used (processed through a secure gateway)
• Address information for KYC and legal compliance purposes

Automatically Collected Data:

• Platform usage data: games played, activity dates and times, session duration
• Device data: device type, operating system, browser version, screen resolution
• Network data: IP address, internet service provider, general geographic location
• Cookie and similar tracking technology data

Every piece of data we collect has a clear and legitimate purpose. 21klwin uses your personal data for the following purposes:

• Account Management: Create and manage your account, verify your identity through the KYC process, and enable you to log in securely.
• Transaction Processing: Process deposits, withdrawals, and any other financial transactions you carry out on the platform accurately and securely.
• Customer Service: Handle enquiries, complaints, and support requests from you across all support channels.
• Security & Fraud Prevention: Detect and investigate suspicious activity, prevent fraud, and protect your account and the platform as a whole.
• Legal Compliance: Fulfil legal and regulatory obligations including anti-money laundering (AML) reporting requirements and KYC requirements.
• Platform Improvements: Analyse usage patterns to improve platform performance, user experience, and features.
• Marketing Communications: Send information about promotions, offers, and platform news — only with your consent and unsubscribable at any time.

21klwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in operating the platform, we may share data with the following parties under certain circumstances:

• Service Providers: Third parties that help us operate the platform — such as cloud infrastructure providers, payment gateway providers, and analytics service providers. All parties are bound by strict data confidentiality agreements.
• Game Providers: Gaming companies that provide games within the 21klwin platform require limited access to technical data to ensure games function correctly.
• Statutory Authority: When required by law, court order, or a competent enforcement authority, we will disclose the necessary data in accordance with proper legal procedures.
• Anti-Fraud Enforcement Body: To assist in investigating and preventing fraud, money laundering, or other financial criminal activity.

The security of your personal data is our highest priority. 21klwin implements a range of technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.

Key security measures we employ include:

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Password storage using irreversible cryptographic hash functions
• Role-based access control (RBAC) — only staff who need to can access user data
• Regular security audits by independent parties
• Real-time threat monitoring and intrusion detection systems
• Separation of production and testing environments to prevent data leaks

21klwin uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login sessions and security settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform for the purpose of improving performance and user experience.
• Functional Cookies: Save your preferences such as language, display settings, and login information to facilitate continued use.
• Analytics Cookies: Collect statistical information about usage patterns to help us improve platform content and services.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect certain platform functions.

21klwin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Active Account Data: For as long as your account remains active and for a reasonable period following account closure, subject to legal requirements.
• Financial Transaction Data: Retained for the period required by applicable financial and anti-money laundering laws — typically between 5 and 7 years.
• KYC Data: Retained for the period required by applicable compliance regulations, even after account closure.
• Security Logs: Retained for a reasonable period for security audit purposes and incident investigation where necessary.
• Marketing Data: Retained until you withdraw consent or request data deletion.

When data is no longer needed, we securely delete it using methods that ensure it cannot be recovered or accessed again.

As a 21klwin user, you have several important rights regarding your personal data. These rights can be exercised by contacting our support team:

In the course of operating the 21klwin platform, your personal data may be processed or stored on servers located in other countries that may have different data protection laws from Malaysia.

In such cases, 21klwin ensures that:

• Data transfers only take place to countries or providers that offer adequate data protection.
• Data processing agreements compliant with international standards are signed with all parties involved.
• The same or higher technical security standards apply across all locations where your data is stored or processed.

21klwin reserves the right to update or modify this Privacy Policy at any time. Any changes will take effect immediately upon publication on our platform, and the "Updated" date at the top of this page will be revised accordingly.

For significant changes, we will make reasonable efforts to notify users through:

• A clear notice on the main page of the 21klwin platform
• In-account notification upon login
• Email to your registered address for critical changes

Your continued use of the 21klwin platform after any changes to this Privacy Policy is considered your acceptance of the updated terms. We encourage you to review this page from time to time to ensure you always understand how we manage your data.

If you have any questions, concerns, or wish to exercise any of your rights regarding personal data, the 21klwin team is here to help. We take every privacy request seriously and are committed to responding within a reasonable timeframe.

You can reach us via:

• Live Chat: Available 24/7 within the 21klwin platform — the fastest way to get immediate assistance.
• Support Email: [email protected] — for written enquiries requiring a detailed response.

When submitting a privacy-related request, please include your account information and a clear description of your request to help us process it more quickly and accurately.