Personal Data Protection

Privacy Policy 21huat
Updated: June 2026

At 21huat, your privacy is not just a legal obligation — it is our genuine commitment. We protect every piece of information you share with us to the highest security standards, in full compliance with Malaysia's Personal Data Protection Act 2010.

PDPA 2010 Compliant
256-bit SSL Encryption
Data Not Sold
Document Information
Version v2.5
Effective Date 1 June 2026
Language Malay
Legislation PDPA 2010

Why Your Data Welcome to Our Platform


High-Level Encryption

All your personal data is encrypted using 256-bit SSL standards in transit and AES-256 at rest. No unauthorised third party can read or access your information.

Data Not Sold

21huat does not sell, lease, or trade members' personal data to any third party for marketing purposes. Your information is used solely for platform operations.

Data Control in Your Hands

You have the full right to access, correct, or request deletion of your personal data at any time. Requests are straightforward and processed within 14 business days.

PDPA 2010 Compliance

Our Privacy Policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010. We conduct regular internal audits to ensure ongoing compliance.

Secure Data Storage

Our servers are protected by multi-layered firewalls, real-time intrusion detection, and automatic daily data backups. The continuity and security of your data are fully guaranteed.

Marketing Communications Control

You may opt in or out of any marketing communications from 21huat at any time through your account settings, without needing to contact our support team.

This Privacy Policy sets out in detail how 21huat collecting, using, storing, and protecting your personal data. By using our platform, you agree to the practices outlined in this document. Please read it carefully before registering.

1Information We Collect

To provide you with the best service, 21huat collecting several categories of information. We only collect what is strictly necessary for the stated purposes and nothing beyond that.

Information you provide directly:

  • Full name as stated in your official identification document.
  • Date of birth for age verification purposes (must be 18 years of age or older).
  • Your active email address and mobile phone number.
  • Account password (stored in hashed form and cannot be reversed).
  • Bank or e-wallet details for deposit and withdrawal purposes.
  • Identity documents submitted during the KYC process (national ID, passport).

Information collected automatically:

  • Your IP address, web browser type, and device operating system.
  • Gaming activity data including betting history, wins, and losses.
  • Time and duration of your login sessions.
  • Technical data used to detect and resolve platform issues.
  • Cookie information and similar tracking technologies (see Section 5).

We never request your ATM card PIN, online banking password, or any confidential financial information via email or Live Chat. If you receive such a request, please report it to our support team immediately.

2How We Use Your Data

All information collected by 21huat is used for clearly defined and lawful purposes. We do not process your data for any other purpose without prior notice.

Purpose of Use Legal Basis Data Type
Account management and verification Contract performance Name, email, password, KYC
Processing of deposits and withdrawals Contract performance Bank details, transaction history
Fraud detection and security Legitimate interests IP, login activity, gaming patterns
Anti-money laundering (AML) compliance Legal obligation KYC, transaction history
Customer support Contract performance Email, phone number, account history
Marketing communications (with consent) Consent Email, phone number
Platform improvements and analytics Legitimate interests Usage data, analytics cookies

3Sharing of Information with Third Parties

21huat never selling or renting your personal data to any party. However, to enable us to deliver a seamless service, there are limited situations where we may need to share data with trusted partners:

  • Payment providers: Financial institutions, and FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost payment providers that process your transactions. They receive only the minimum information required for processing.
  • Game providers: Gaming software companies that provide slots, Live Casino, and other games. Data sharing is limited to the technical information required for game functionality.
  • KYC services: Third-party identity verification providers that assist us in authenticating your documents.
  • Legal authorities: When required by law, court order, or a valid request from a law enforcement authority.
  • Fraud detection: Specialist companies that help us detect and prevent fraudulent activity.

All our third-party partners are bound by strict data protection agreements. They may only use your data for agreed purposes and must adhere to security standards equivalent to our own.

4Data Security

We take data security very seriously. 21huat implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • Data encryption in transit using TLS 1.3 protocol.
  • Data encryption at rest using AES-256.
  • Role-based access control — only staff who require access to specific data are permitted.
  • 24/7 security monitoring with automated intrusion detection systems.
  • Penetration testing by independent third parties every six months.
  • Mandatory data security training for all 21huat staff.
  • Automatic daily data backups with geographically separated storage.

While no system can be guaranteed 100% secure, 21huat employing the highest industry standards on par with financial institutions. In the event of any security incident involving your data, we will notify you within 72 hours.

5Cookies & Tracking Technologies

Platform 21huat uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
  • Preference Cookies: Saves your personal settings such as language, time zone, and display preferences.
  • Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement. Data is collected anonymously.
  • Marketing Cookies: Used to display relevant promotions and offers based on your activity. Only activated with your consent.

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect platform functionality.

6International Data Transfers

In some cases, your personal data may be transferred to, processed in, or stored on servers located outside Malaysia. When this occurs, 21huat ensures that protection equivalent to Malaysia's PDPA 2010 is provided through:

  • Legally binding data transfer agreements with the receiving parties.
  • Transfers are made only to countries recognised as having an adequate level of data protection.
  • Use of standard contractual clauses approved by the relevant regulatory authority.

7Data Retention Period

21huat retaining your personal data only for as long as necessary to fulfil the purpose of collection or to comply with legal requirements:

  • Active account data: Retained for the duration your account remains active.
  • Financial transaction history: Retained for 7 years in compliance with anti-money laundering legal requirements.
  • KYC documents: Retained for 5 years after account closure.
  • Gaming activity log: Retained for 2 years after each session.
  • Support communication data: Retained for 2 years after case resolution.
  • Inactive account: Data may be deleted after 3 years of inactivity, with prior notice to you.

8Your Rights Under PDPA 2010

As a data subject, you have the following rights under Malaysia's Personal Data Protection Act 2010, which you may exercise at any time:

Access Rights

Request a copy of the personal data we hold about you within 21 working days.

Right to Rectification

Correct any inaccurate or incomplete personal data in our records.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Erasure

Request deletion of your personal data subject to legal retention requirements.

To exercise any of the above rights, contact our support team by email at [email protected] or via Live Chat. We will process your request within 14 business days.

9Children's Privacy

Platform 21huat is intended for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. If we discover that a minor's data has been collected without our knowledge, we will promptly delete that data and terminate the relevant account.

Parents or guardians who believe their underage child has registered on our platform are urged to contact us immediately so that action can be taken without delay.

10Changes to This Privacy Policy

21huat reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any material changes will be communicated to you via:

  • A clear notice on the platform's home page at least 14 days before changes take effect.
  • Email sent to the address registered to your account.
  • A pop-up notification on your next login requiring acknowledgement.

Your continued use of the platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this document always reflects the date of the most recent revision.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

  • Email: [email protected]
  • Live Chat: Available on the platform 24/7
  • Response time: Within 1 business day for general enquiries; 14 business days for formal data rights requests

For enquiries regarding the platform's terms of use, please refer to our Terms and Conditions ours. For information on responsible gaming, visit our Responsible Gaming ours.

Your privacy is our priority 21huat. We will never compromise on protecting your personal information. Your trust is our most valuable asset.

Your Data Rights, In Your Hands


We believe you have the right to know and control how your data is used. Here is a summary of your rights as a 21huat member.

Data Access
View all data we hold about you
Data Correction
Correct inaccurate information in your account
Delete Data
Request data deletion subject to legal conditions
Object to Processing
Opt out of direct marketing at any time
Data Portability
Obtain a copy of your data in a portable format
Processing Restrictions
Restrict the use of your data under certain circumstances

FAQ Privacy Policy


Not at all. 21huat never sells, leases, or trades members' personal data to third parties for marketing or commercial purposes. Your data is only shared with necessary operational partners such as payment providers and game providers, and solely for the purposes stated in this Privacy Policy.

You may submit a data access request by emailing [email protected] or via Live Chat on our platform. State that you wish to make a "personal data access request" and include your account number. We will process the request within 14 business days and deliver a copy of your data in a suitable format.

Yes, you may request data deletion. However, certain data may need to be retained to fulfil legal obligations, such as financial records for 7 years under Malaysia's anti-money laundering laws. Data not subject to such obligations will be deleted within 30 days of your request being approved.

After account closure, your personal data will be retained for the period required by law — typically 5 to 7 years for financial and KYC records. Once that period expires, all relevant data will be securely deleted from our systems. You will not receive any marketing communications after your account is closed.

21huat does not store your full credit or debit card details on our servers. All payment transactions are processed directly through licensed payment providers such as FPX and DuitNow, which comply with PCI DSS standards. We retain only the minimum information required to identify your payment method for your convenience in future transactions.

Yes. You may withdraw your consent to receive marketing communications at any time through your account settings under the "Communication Preferences" section. You may also click the "unsubscribe" link at the bottom of any marketing email you receive. Withdrawal of consent will take effect within 48 hours.

Register at 21huat — Your Data Is Protected

Join millions of members who trust 21huat. Our platform protects your privacy at every step — from registration through to withdrawal. Enjoy world-class entertainment with complete peace of mind.

Data protected by 256-bit SSL encryption
Full compliance with Malaysia's PDPA 2010
Data is not sold to any third party
Full control of your data in your hands
Bahasa Melayu