Kaki21 Privacy Policy for Malaysian Players

kaki21 may collect the following categories of personal information:

• Registration details: full name, date of birth, username, residential address, email address, mobile number, and account preferences.
• Identity records: MyKad, passport, driving licence, proof of address, photograph, and verification results used for KYC checks.
• Financial information: deposit and withdrawal records, masked bank or card details, e-wallet references, payment method, currency, and transaction status.
• Gaming activity: bets, stakes, winnings, losses, game history, bonus use, account limits, sports selections, and session duration.
• Technical information: IP address, browser, operating system, device identifiers, login time, approximate location, and security logs.
• Communications: live chat records, support enquiries, complaints, verification correspondence, and marketing preferences.

When a player uses Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, or Public Bank, kaki21 records the transaction information needed to reconcile the payment. kaki21 does not require players to disclose online banking passwords or complete card security credentials.

Most personal information is provided directly by you when you create a kaki21 account, complete identity checks, deposit funds, request a withdrawal, claim a promotion, set a gambling limit, or contact support. Accurate information is important because incomplete or incorrect details may delay KYC checks or MYR withdrawals.

kaki21 also collects information automatically when you use the platform. Server logs, cookies, security monitoring systems, and analytics tools may record how a page is accessed, which features are used, and whether a login attempt presents an unusual risk.

Additional information may be received from payment processors, identity verification providers, fraud screening services, game providers, or competent authorities. kaki21 only requests information relevant to an identified operational, compliance, security, or legal purpose.

The kaki21 platform is intended only for players aged 21 and above. kaki21 may ask for identity documents before allowing a withdrawal, when account details change, or when an automated risk check indicates that further review is appropriate.

Verification information may be compared with registration details, payment ownership records, and reliable verification sources. This helps kaki21 prevent minors from gambling, stop identity theft, maintain one account per player, and confirm that withdrawals are returned to the correct person.

A player who does not provide adequate verification may have account functionality restricted while the review remains outstanding. If kaki21 determines that an account belongs to a person under 21, the account will be closed in accordance with the Terms & Conditions.

Payment records are processed to credit deposits, pay valid withdrawals, investigate reversals, prevent fraudulent transactions, and maintain accurate account statements. kaki21 may retain the payer name, transaction reference, amount, date, payment channel, account ownership confirmation, and the result of relevant risk checks.

Payment services such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank may process information under their own operational procedures. kaki21 shares only the details reasonably required to initiate, verify, reconcile, or investigate a transaction.

For security, kaki21 may require a withdrawal to be returned through the same method used for the deposit. A transaction may be paused while identity, source-of-funds, or payment ownership checks are completed.

kaki21 uses cookies and similar storage technologies to maintain login sessions, remember preferences, protect accounts, measure platform performance, and identify suspicious activity. Essential cookies support core functions and cannot be disabled through the platform without affecting service availability.

Performance information helps kaki21 understand whether pages load correctly on common Malaysian mobile networks and devices. Analytics may show aggregated navigation patterns, but kaki21 does not use those reports to expose a player's private betting history publicly.

Browser controls may be used to delete or restrict cookies. Doing so can cause repeated login requests, prevent preferences from being saved, or stop some kaki21 features from operating as intended.

kaki21 may send account holders information about eligible promotions, game updates, sports markets, or service improvements where consent or another permitted basis applies. Marketing preferences are separate from essential account and security messages.

Players may withdraw marketing consent or update communication preferences. kaki21 may still send non-promotional notices concerning password changes, transaction status, KYC requirements, responsible gambling limits, policy updates, suspected fraud, or account closure.

kaki21 does not knowingly direct gambling promotions to people under 21 or to players subject to active self-exclusion. Suppression records may be retained to ensure that an opt-out or self-exclusion request continues to be respected.

kaki21 retains personal information for as long as an account remains active and for a reasonable period afterwards where retention is needed for transaction records, fraud prevention, dispute handling, security investigations, responsible gambling controls, or legal compliance.

Retention periods vary by data type. Temporary technical logs may be kept for a shorter period than identity and financial records. Information connected to a complaint, chargeback, self-exclusion, suspected fraud, or legal claim may be retained until the matter and any applicable limitation period have ended.

When information is no longer required, kaki21 will delete, anonymise, or securely isolate it according to operational and legal requirements. Anonymised statistical information that no longer identifies a player may be retained for platform reporting and improvement.

Subject to applicable law and verification of identity, a player may ask kaki21 to review how personal information is handled. A request may be limited where disclosure would affect another person's rights, compromise security, reveal fraud controls, or conflict with a legal retention duty.

kaki21 may request sufficient information to confirm that the requester is the account holder. This protects players against unauthorised disclosure and identity fraud.

kaki21 processes account activity to provide deposit limits, session reminders, cooling-off periods, and self-exclusion controls. Indicators such as unusually long sessions, repeated deposit attempts, sharp changes in spending, or direct expressions of concern may be reviewed to support player wellbeing.

Information about self-exclusion may be retained after account closure to prevent accidental or deliberate reopening during the exclusion period. This processing is designed to honour the player's request and protect the integrity of kaki21 responsible gambling controls.

Responsible gambling information is handled with appropriate confidentiality. Further details about limits, self-exclusion, budgeting, and 21+ access are available on the Responsible Gambling page.

kaki21 does not permit anyone under 21 to register, deposit, gamble, or place sports bets. The platform is not designed for children, and kaki21 does not knowingly collect personal information from minors for gambling purposes.

If kaki21 has reasonable grounds to believe that an account is controlled by a person under 21, the account may be suspended while age verification is completed. Where underage access is confirmed, the account will be closed and the matter handled under the applicable account and legal procedures.

Parents and guardians should secure devices, payment methods, and identity documents to reduce the risk of unauthorised use. Concerns about possible underage access may be reported to the kaki21 support team.