Privacy Policy huat21 — Personal Data Protection for Malaysian Players

1 Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how huat21 ("we", "Platform") manages personal information for all users who access or use services through the huat21.net website and our official mobile app.

Huat21 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We understand that your trust is the most valuable asset in our care — and protecting your privacy is the foundation of that trust.

This Policy applies to all information we collect when you register an account, make deposits or withdrawals, play games, contact our support team, or simply browse our platform. By using the huat21 platform, you agree to the practices described in this Policy.

2 Personal Data We Collect

We only collect information that is genuinely necessary to provide you with a safe, lawful, and enjoyable experience. Below are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, date of birth, gender, national ID number (MyKad) or passport number.
• Contact Information: Email address, mobile number, residential address.
• Account Information: Username, password (stored as an encrypted hash), security questions.
• Financial Information: Bank account number, e-wallet details, deposit and withdrawal transaction records.
• KYC Verification Documents: Copies of identity documents, bank statements, and utility bills for identity verification purposes.

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, operating system, screen resolution, time zone.
• Usage Data: Pages visited, session duration, clicks and interactions within the platform.
• Game Data: Game history, wagering, wins, losses, and game preferences.
• Device Data: Unique device identifiers, hardware information for mobile applications.

2.3 Data from Third Parties

• Verification information from payment service providers for fraud prevention purposes.
• Identity verification data from licensed third-party screening agencies.
• Information you share publicly via social media platforms if you use them to log in.

3 How We Use Your Data

Every piece of information we collect is used for a clear and lawful purpose. huat21 does not use your data for any purpose not stated in this Policy without obtaining your prior consent.

You may withdraw your marketing consent at any time through your account settings or by contacting our support team. Withdrawing consent will not affect any data processing that has already taken place.

4 Legal Basis for Personal Data Processing

Huat21 processes your personal data on valid legal grounds under Malaysia's PDPA. Depending on the situation, the processing bases we apply are as follows:

• Contract Performance: Processing necessary to fulfill the agreement between you and huat21, including account management, deposit and withdrawal processing, and game provision.
• Legal Obligation: We are legally required to process certain data for AML and KYC compliance and for reporting to the relevant authorities.
• Legitimate Interest: We process data to detect and prevent fraud, ensure platform security, and improve the user experience.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent in advance.

5 Data Sharing & Disclosure

Huat21 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Payment Service Providers: To process your deposits and withdrawals, the necessary financial information is shared with licensed payment providers bound by strict confidentiality agreements.
• Game Providers: Our game software providers receive the technical data required to run games correctly and ensure game integrity.
• KYC & Verification Services: Third-party identity verification agencies receive only the data required for compliance purposes.
• Legal Authority: We disclose data when required by law, court order, or directive from a legitimate regulatory authority.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred with prior notice to you.

6 Data Storage, Retention Period & Security

Huat21 operates secure server infrastructure with multiple layers of protection to keep your data safe at all times. All data is stored in data centers that comply with the ISO 27001 international security standard.

6.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data in the database using AES-256 standards.
• Passwords are stored as one-way hashes that cannot be decrypted.
• Two-factor authentication (2FA) is available and encouraged for all accounts.
• Real-time security monitoring and an intrusion detection system (IDS) active 24/7.
• Periodic security audits conducted by appointed independent security firms.

6.2 Data Retention Period

• Active account data: Retained for as long as your account remains active.
• Data after account closure: Retained for 5 years to meet AML and tax legal requirements.
• Technical logs: Retained for 12 months for security and troubleshooting purposes.
• Support communication records: Retained for 3 years from the date of last interaction.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with our standard procedures.

7 Cookies & Tracking Technologies

The huat21 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how users interact with our platform.

7.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session security, and language selection. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised usage data to help us understand how the platform is used and identify areas for improvement.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for a smoother repeat experience.
• Marketing Cookies: Used with your consent to display relevant content and promotions. You may disable these cookies through your browser settings.

8 Your Rights Over Personal Data

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, contact our Privacy Officer at [email protected], stating the right you wish to exercise and your account details. We will process your request within 30 working days.

9 Child Data Protection

The huat21 platform is strictly limited to individuals aged 21 and above. We do not knowingly collect, process, or store any personal data from minors or underage individuals.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete all such data and close the account. Parents or guardians who believe their child has registered on our platform are urged to contact us immediately at [email protected].

10 Links to Third-Party Websites

The huat21 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the huat21 platform and does not cover the privacy practices of any third-party websites.

Huat21 is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of each website you visit separately.

11 Changes to This Privacy Policy

Huat21 reserves the right to update or modify this Privacy Policy at any time. Any changes will take effect immediately upon publication of the latest version on this page with an updated revision date.

For significant changes that materially affect your privacy rights, we will endeavor to notify you via email or an in-platform notification at least 14 days before the changes take effect. Your continued use of the huat21 platform after any changes are published constitutes your acceptance of the updated Privacy Policy.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, our team is ready to assist. We take every privacy inquiry seriously and are committed to providing a thorough and timely response.

• Privacy Officer Email: [email protected]
• Live Chat: Available directly on the huat21 platform — 24 hours a day, 7 days a week.
• Help Center: Visit page FAQ us for answers to frequently asked questions.

We aim to respond to all privacy inquiries within 5 working days. For formal complaints, please include "Privacy Complaint" in your message subject line so our team can prioritize it.