Privacy Policy huat21 – Your Personal Data Protection

01Introduction

Huat21 ("we", "Platform") is an online gaming and entertainment service provider operating for users in Malaysia. We understand that privacy is something you value deeply, and we take this responsibility seriously.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the huat21 platform — whether via mobile browser, laptop, or any other device. This Policy applies to all registered members, website visitors, and anyone who interacts with our platform.

By registering an account or using our services, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, we advise you not to use the huat21 platform.

02Personal Data We Collect

Huat21 only collects data that is necessary to provide you with a safe, efficient, and responsible service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs, or biometric data except where required by law or with your explicit consent.

03How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. We do not use your data for anything unrelated to huat21 services. The following are the primary purposes of data use:

• Account management — Creates, verifies, and maintains your member account securely.
• Transaction processing — Processes deposits, withdrawals, and bonus payments accurately and promptly.
• KYC Verification — Fulfils legal requirements relating to identity verification and anti-money laundering (AML).
• Platform Security — Identifies and prevents fraud, account abuse, and unauthorised access.
• Responsible gaming — Monitors gaming patterns to identify members who may need assistance and support.
• Service communications — Sends transaction notifications, account updates, and relevant promotional information.
• Platform improvements — Analyses usage data to improve overall functionality, performance, and user experience.
• Legal compliance — Fulfils reporting and compliance obligations to the relevant authorities.

04Legal Basis for Data Processing

Huat21 processes your personal data on valid legal bases under Malaysia's PDPA 2010. There are several bases we rely on depending on the type of processing carried out:

• Contract performance — Processing required to fulfil the Terms and Conditions you agreed to upon registration.
• Legal obligations — Processing mandated by Malaysian law, including AML and KYC requirements.
• Consent — For marketing and non-essential cookies, we require your explicit consent.
• Legitimate interest — Processing required for legitimate business interests such as fraud prevention and security enhancement, provided it does not override your privacy rights.

05Data Sharing and Disclosure

Huat21 does not sell your personal data to any party. However, in certain situations, we may need to share your data with carefully selected third parties:

• Payment service providers — Banks, e-wallet providers, and payment processors that handle your financial transactions. They are bound by strict confidentiality agreements.
• Game providers — Gaming software companies that provide slots, live casino, and other games on our platform, strictly for necessary technical purposes.
• Technology service providers — Companies providing IT infrastructure, cloud hosting, and cybersecurity services, subject to strict data processing agreements.
• Statutory authorities — Government agencies, regulatory bodies, or law enforcement authorities when required by Malaysian law.
• Analytics services — Third-party analytics tools used to improve the user experience receive only aggregated, anonymised data.

06Data Security

Protecting your data is our absolute priority. huat21 implements comprehensive technical and organisational security measures to safeguard your personal information against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption — All data transmitted between your device and huat21 servers is protected with bank-grade encryption.
• Data encryption at rest — Personal data stored in our databases is protected with AES-256 encryption.
• Strict access controls — Only staff who require access to your data to perform their duties are permitted to do so, and only to the extent necessary.
• 24/7 Monitoring — Our security monitoring system operates around the clock to detect and respond to any cyber threats.
• Regular security audits — We conduct regular security assessments and penetration testing by certified independent parties.
• Two-factor authentication (2FA) — Member accounts are protected with two-factor authentication options for an added layer of security.

While we take all necessary security measures seriously, no online system can guarantee 100% absolute security. You also play an important role by keeping your password confidential and not sharing your login details with anyone.

07Data Retention Period

Huat21 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active account data — Retained for the full duration your account is active and in use.
• Financial transaction records — Retained for a minimum of 7 years after the transaction date in accordance with AML and tax legal requirements.
• KYC records and identity verification — Retained for a minimum of 5 years after account closure.
• Support communication logs — Retained for 3 years for reference and dispute resolution.
• Cookie and analytics data — Retained for between 30 days and 2 years depending on the type of cookie.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

08Your Rights Under PDPA

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data that we hold:

09Cookies and Tracking Technologies

Huat21 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Necessary cookies — These cookies are essential for core platform functions such as secure login and session management. They cannot be disabled.
• Functional cookies — Remembers your preferences such as language and display settings to deliver a more personalised experience.
• Analytics cookies — Helps us understand how users interact with the platform so we can improve our services. Data collected is anonymised.
• Performance cookies — Monitors platform performance and identifies any technical issues that need to be resolved.

You may manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled as they are critical to your account security.

10Child Protection

Huat21 is a platform intended solely for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without valid parental or guardian consent, we will immediately take steps to delete that data and close the relevant account. We encourage parents and guardians to monitor their children's online activities.

If you have reason to believe that someone under the age of 18 has registered an account on huat21, please contact us immediately so that appropriate action can be taken.

11Amendments to the Privacy Policy

Huat21 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via:

• Notifications displayed prominently on the huat21 platform before changes take effect.
• Notification emails are sent to the email address registered to your account.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after any changes take effect constitutes your acceptance of the latest version of this Privacy Policy.

12Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are here to help. Here is how to reach us:

We are committed to addressing every enquiry and complaint seriously and within a reasonable timeframe. Your privacy is our priority.