21huat Privacy Policy

Definitions

In this Privacy Policy, "21huat", "we", "us", and "our" refer to the platform operator. "Player", "user", and "you" refer to any individual who registers, visits, or otherwise interacts with 21huat. "Personal data" or "personal information" means any data that can identify or be used to identify a natural person, directly or in combination with other data.

"Processing" means any operation performed on personal data, including collection, storage, use, transfer, and deletion. "Third party" refers to any organisation, service provider, or individual that is separate from 21huat and the user. "Payment method" includes Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, bank transfers through Maybank, CIMB, Public Bank, Hong Leong, and any other payment channel accepted by 21huat.

Data We Collect

21huat collects personal data from different sources and in different categories depending on how you interact with the platform.

Registration and Account Data

• Full name, date of birth, and residential address as provided during sign-up.
• Email address, mobile phone number, and preferred currency (MYR).
• Username, account settings, and chosen responsible gambling limits.

Identity Verification (KYC) Data

• Copies of government-issued photo ID such as Malaysian MyKad, passport, or driving licence.
• Proof-of-address documents including utility bills, bank statements, or official correspondence.
• Selfie images or video taken to match a submitted identity document.
• Payment ownership documentation associated with a selected withdrawal method.

Financial and Transaction Data

• Deposit and withdrawal amounts, dates, reference numbers, and payment method identifiers.
• Wagering history, game activity records, and bonus redemption logs.
• MYR account balance, pending amounts, and associated transaction status.

Device, Technical, and Usage Data

• IP address, approximate geographic location, browser type, operating system, and device identifiers.
• Session timestamps, page navigation patterns, and feature interaction logs.
• Data collected via cookies, pixels, or similar technologies as described in Section 7.

Communications Data

• Support chat transcripts, emails, and messages you send to 21huat customer care.
• Feedback, complaint records, and any correspondence related to your account or a transaction.

Data Processing and Purposes

21huat processes personal data for the following purposes:

• Account administration: Creating, maintaining, verifying, and closing accounts; managing MYR balances, payment histories, and session access.
• Identity and eligibility verification: Confirming age (21+), identity, address, and payment ownership before releasing deposits, withdrawals, or high-value bonuses.
• Payment processing: Facilitating MYR deposits and withdrawals through supported Malaysian payment providers and monitoring for unusual transaction patterns.
• Security and fraud prevention: Detecting, investigating, and responding to prohibited conduct, duplicate accounts, chargebacks, identity misuse, or suspected collusion.
• Responsible gambling controls: Applying deposit limits, session reminders, cooling-off periods, and self-exclusion records set by the player or required operationally.
• Legal and compliance obligations: Retaining data as required by applicable law, responding to lawful information requests, and maintaining audit records.
• Service improvement: Analysing usage patterns to improve page performance, mobile navigation, game discovery, and support quality.
• Customer communications: Responding to support requests, sending account notifications, and providing relevant service updates where permitted.

21huat does not sell personal data to third parties for their own marketing purposes.

Legal Bases for Processing

21huat processes personal data on one or more of the following grounds:

• Contractual necessity: Processing required to create and operate your account, settle wagers, process payments, and respond to account-related requests.
• Legal obligation: Processing required to comply with applicable laws covering record-keeping, age verification, anti-money-laundering requirements, and lawful disclosure obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, service improvement, and responsible gambling enforcement, where these interests are not overridden by your privacy rights.
• Consent: Where you have provided consent for a specific purpose such as optional marketing communications, you may withdraw that consent at any time without affecting lawful processing carried out before withdrawal.

Disclosure to Third Parties

21huat may share personal data with carefully selected third parties only as necessary and on terms that require them to protect it appropriately:

• Payment processors: Malaysian payment service providers including eWallet operators, bank FPX networks, and card-scheme processors who facilitate MYR transactions.
• Identity verification providers: KYC service partners who assist with document authentication and age confirmation, subject to data-processing agreements.
• Game and platform technology providers: Software vendors and content suppliers who support casino, live casino, slots, and sports betting functionality.
• Security and fraud intelligence services: Specialised providers who help identify abnormal activity, device fraud, or account misuse.
• Professional advisers: Legal, audit, and compliance professionals who require access to fulfil an engagement, subject to professional confidentiality obligations.
• Regulatory and law-enforcement authorities: Government bodies, regulators, or courts where disclosure is required by applicable law or a valid legal process.

Cross-border transfers, where they occur, are conducted using appropriate safeguards such as contractual data-protection clauses or equivalent protections, consistent with the data protection standards applicable to 21huat's operations.

Cookies and Tracking Technologies

21huat uses cookies and similar technologies to operate core platform functionality, remember account preferences, analyse aggregate usage, and support security checks. The principal categories are:

• Strictly necessary cookies: Required for login sessions, security tokens, responsible gambling limit enforcement, and essential platform operations. These cannot be disabled without breaking core functions.
• Performance and analytics cookies: Collect aggregated data on page load times, navigation paths, device types, and feature usage to guide platform improvements.
• Functionality cookies: Store non-sensitive preferences such as display language and notification settings to provide a more consistent experience across sessions.

Most browsers allow you to control cookie storage and retrieval. Disabling all cookies may affect your ability to log in, access account features, or use payment functions. 21huat does not use cookies to build advertising profiles for external networks.

Retention and Deletion

21huat retains personal data for as long as it is required for the purposes described in this policy or as required by applicable law. In practice, this means:

• Active account data is retained for the duration of the account relationship plus any legally prescribed period thereafter.
• Transaction and wagering records are retained for the period required for financial, audit, and compliance purposes, which is typically a minimum of five to seven years from the date of the transaction.
• Identity verification documents are retained for the period required by applicable due-diligence and record-keeping obligations.
• Support communications are retained for quality monitoring, complaint resolution, and dispute evidence purposes.
• Anonymised or aggregated analytics data, which cannot be used to identify a person, may be retained indefinitely.

When personal data is no longer required, 21huat will delete or irreversibly anonymise it using appropriate technical methods, subject to any overriding legal obligation to preserve specific records.

Security Measures

21huat applies layered technical and operational controls to protect personal data against unauthorised access, disclosure, alteration, and loss:

• Encrypted data transmission using industry-standard TLS protocols between your device and 21huat systems.
• Access controls that restrict internal access to personal data on a role-based, need-to-know basis.
• Account protection features including session expiry, login monitoring, and verification checks for sensitive account changes.
• Vendor management processes that assess the data-protection practices of key third-party service providers.
• Incident response procedures for identifying, containing, and notifying relevant parties if a data security event occurs.

No internet-based system can guarantee absolute security. You contribute to account security by choosing a strong, unique password, not sharing credentials, using trusted devices, and reporting suspicious activity to 21huat support promptly. Support contact details are on the 21huat website in plain text; telephone and email links are not available on this page.

User Rights

Subject to applicable law and verification of your identity, you may exercise the following rights in relation to personal data 21huat holds about you:

• Access: Request a copy of the personal data 21huat holds about your account and how it is used.
• Correction: Ask 21huat to correct inaccurate or incomplete personal data without undue delay.
• Deletion: Request deletion of personal data where it is no longer required, subject to overriding legal retention obligations and fraud-prevention records that must be preserved.
• Restriction: Ask 21huat to restrict processing of your personal data during a period in which accuracy is disputed or a legitimate-interests assessment is pending.
• Data portability: Where applicable, request a machine-readable copy of personal data you provided and that is processed by automated means on a contractual or consent basis.
• Objection: Object to processing carried out on the basis of legitimate interests, including profiling, where your personal circumstances warrant it.
• Withdrawal of consent: Withdraw previously given consent for a specific processing purpose without affecting processing carried out before withdrawal.

To exercise any of these rights, contact 21huat support through the verified channels available after login. 21huat will respond within a reasonable period, which will not normally exceed 30 days. Where a request is complex or numerous, 21huat may extend this period and will notify you accordingly. Identity verification may be required before disclosing or amending personal data.

Minors and Age Restriction

21huat is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to 21huat, contact support immediately using the plain-text contact details on the website. 21huat will investigate and, where confirmed, take appropriate steps including deletion of the minor's personal data and closure of the associated account.

Parents and guardians concerned about underage access to gambling platforms are encouraged to use parental controls and internet filtering tools on shared or household devices.

Policy Changes and Contact

21huat may update this Privacy Policy to reflect changes in the platform, applicable data-protection law, payment infrastructure, or responsible gambling requirements. The revised policy will be published on this page with an updated effective date. For material changes, 21huat may also notify active users through an account notice where practicable. Continued use of the platform after publication of an updated policy constitutes acceptance of the revised terms.

For privacy-related questions, data-subject rights requests, or concerns about how 21huat handles personal information, contact our support team through the verified channels available after login. Written privacy enquiries may be directed to the plain-text email address shown in the footer: [email protected]. Please do not include your password, payment card numbers, or one-time codes in any correspondence.

21huat aims to resolve all privacy enquiries within 30 days. Where a matter cannot be resolved directly, you may have the right to escalate to a relevant data-protection authority depending on the laws applicable to your circumstances.