Huat21 Privacy Policy – Personal Data Protection for Malaysia Members

1. Information We Collect

In operating the huat21 platform for Malaysia members, we collect several categories of personal data necessary for specific purposes. Below are the categories of information we collect:

Personal Identity Information:

• Full name as it appears on your official identity document
• An active Malaysian mobile number (used for OTP verification and important communications)
• An active email address that you have access to
• Date of birth (for minimum age verification of 18 years)
• National identity card number (MyKad) when full verification is required for large withdrawals

Technical & Usage Information:

• IP address of the device used to access huat21
• Browser type and version, and device operating system
• Session data — login times, session duration and in-platform activity
• Betting and gaming activity records (retained for security, dispute resolution and compliance purposes)
• Cookies and similar tracking technologies as described in Section 6

Financial Information:

• Deposit and withdrawal records, including amounts, payment methods used, and transaction dates
• The account name of the e-wallet or bank used for deposits and withdrawals (for ownership verification purposes)
• Complete transaction history within your huat21 account

2. How We Collect Your Data

Huat21 collects member personal data through several different channels. It is important that you understand each of these channels so you know exactly how your information is gathered:

• During account registration: You provide basic information directly when completing the registration form on huat21. This includes your name, phone number, email address and password.
• During identity verification: When full identity verification is required (typically before your first major withdrawal), you may be asked to submit supporting documents such as a copy of your MyKad.
• While using the platform: Technical data such as IP address, device type, game records, and betting activity is collected automatically when you use the huat21 platform.
• Through cookies and similar technologies: When you browse the huat21 platform, cookies and similar tracking technologies collect data about your preferences and how you interact with the platform.
• During customer service interactions: When you contact the huat21 support team via live chat, email, or WhatsApp, the information you provide during that conversation is stored for reference and service improvement purposes.
• Through financial transactions: Each time you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, ShopeePay, or Boost, a verified transaction record is collected and stored in huat21's system.

3. Purpose of Data Use

Huat21 uses collected personal data solely for legitimate and transparent purposes. Below is a complete list of how member data is used on huat21:

Huat21 never uses members' personal data for purposes unrelated to the services we provide. If you have given consent to receive marketing communications, you may withdraw that consent at any time with no negative consequences to your account.

4. Data Storage & Security

The security of members' personal data is huat21's top priority. We implement a range of technical and procedural measures to ensure your data is protected to the highest standard at all times:

• Data encryption in transit: All data transmitted between your device and huat21's servers is protected by TLS 1.3 protocol with 256-bit encryption. This ensures that no third party can read your data while it is in transit over the internet.
• Encryption of data at rest: Data stored in huat21's databases is also encrypted. Even if someone were to gain unauthorised access to the raw data files, the contents would be unreadable without the appropriate encryption key.
• Strict internal access controls: Only huat21 staff who require access to specific personal data to carry out their duties are permitted to do so. All access is logged and actively monitored.
• 24/7 security monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts. Security incident response procedures are in place and ready to be activated whenever necessary.
• Regular security audits: huat21 undergoes regular security assessments by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Secure data backup: Critical data is backed up regularly to secure, offsite locations to ensure service continuity and protect against data loss caused by hardware failure or disaster.

5. Third-Party Data Sharing

Huat21 does not sell members' personal data to any party. However, there are specific situations where we need to share data with selected third parties. Below is a full list of those situations and the reasons for them:

• Payment service providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), ShopeePay or Boost, the necessary transaction details are shared with the relevant payment provider to process the transaction. These providers maintain their own strict privacy policies and security standards.
• Game providers: Third-party game providers that offer titles on the huat21 platform (such as Pragmatic Play and PG Soft) may receive the minimum technical data required to display their games correctly. No sensitive personal identity data is shared for this purpose.
• Competent authorities: huat21 may be required to disclose personal data to authorities such as law enforcement agencies or regulatory bodies where mandated to do so by law or a valid court order. We will inform you of any such request unless prohibited from doing so by law.
• Professional advisors: Lawyers, accountants or auditors appointed by huat21 may access certain data in the course of providing their professional services. All such parties are bound by strict confidentiality agreements.

In all cases where data is shared with third parties, huat21 ensures that the relevant parties have adequate data protection measures in place and use the data only for the specified purpose. huat21 never shares data for third-party marketing purposes without your explicit consent.

6. Use of Cookies

Huat21 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure our services function correctly. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core huat21 platform functions such as login session authentication, account security, and language preferences. These cookies cannot be disabled without affecting core platform functionality. They do not store any personally identifiable information.
• Performance & Analytics Cookies: Helps huat21 understand how members use the platform — the most frequently visited pages, time spent in each section, and general navigation patterns. This data is used in aggregated form without identifying individual users.
• Functional Cookies: Stores your preferences such as your preferred display layout, saved game settings and "remember me" login details if you choose to enable them. These cookies make your huat21 experience more convenient.
• Game Session Cookies: Used by third-party game providers to ensure smooth gameplay sessions and that the latest round data is saved correctly while you play.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the huat21 platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, or Safari, refer to the respective browser's help documentation.

7. Member Privacy Rights

As a huat21 member, you have certain rights regarding your personal data. huat21 is committed to facilitating the exercise of these rights without unnecessary obstacles:

To submit any request relating to your privacy rights, please send an email to support@huat21.best with the subject line "Privacy Rights Request" and specify the right you wish to exercise along with your account details for identity verification. huat21 will respond within 30 business days.

8. Financial Data & Payments

As the huat21 platform involves financial transactions, we take additional measures to protect members' financial data. This is one of the most sensitive aspects of our Privacy Policy, and we want you to have a clear understanding of it:

• Huat21 does not store full credit card numbers, full bank account numbers, CVV numbers, or PINs for any payment method. All such information is processed directly by third-party payment providers that are PCI-DSS compliant.
• When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u or CIMB Clicks), ShopeePay or Boost, you will be redirected to the payment provider's secure interface to complete the transaction. huat21 receives only a confirmation of whether the transaction was successful or unsuccessful — not the payment details themselves.
• The transaction records we retain are contextual records — the deposit or withdrawal amount, date, time, payment method used (e.g. "Touch 'n Go"), and transaction status. These records are required for dispute resolution and financial auditing.
• For withdrawals, huat21 requires verification that the withdrawal method is in the member's own name. This is an anti-money laundering measure and an account security safeguard.
• All financial transaction records at huat21 are stored in encrypted systems with strictly limited access. These records are retained for a minimum of 7 years in accordance with standard financial compliance requirements.

9. Cross-Border Data Transfers

As an online platform, huat21 may use server infrastructure and third-party services that operate outside Malaysia. In such cases, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Here is how we manage cross-border data transfers:

• Huat21 only transfers data to countries or organisations that maintain a level of data protection equivalent to or higher than that required under Malaysian data protection law.
• All third-party service providers that process huat21 member data outside Malaysia are required to sign a data processing agreement setting out the minimum data protection standards they must comply with.
• Data transfers for payment processing via Touch 'n Go, GrabPay, DuitNow, and other Malaysian local payment methods are typically processed within Malaysia by local providers that comply with Bank Negara Malaysia regulations.
• If you would like more information about the safeguards applied to cross-border data transfers by huat21, please contact us at support@huat21.best.

10. Policy Regarding Minors

Huat21 is a platform designed exclusively for individuals aged 18 and above. We do not knowingly collect or store personal data from individuals under the age of 18.

• All account registrations require a minimum age verification of 18 years. huat21 uses verification mechanisms including date of birth confirmation and, where necessary, identity document verification to confirm age.
• If huat21 discovers that personal data belonging to an individual under 18 has been collected inadvertently, that data will be deleted immediately and the associated account will be closed.
• If you are a parent or guardian who believes your child under the age of 18 has registered an account on huat21, please contact us immediately at support@huat21.best so we can take the appropriate action.

11. Changes to the Privacy Policy

Huat21 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or technological developments. Here is how we manage any changes to this Privacy Policy:

• Members will be notified of any material changes to this Privacy Policy via their registered email and/or in-platform notifications on huat21 at least 14 days before the changes take effect.
• Minor changes that do not affect members' core rights — such as language corrections or additional clarifications — may be updated without prior notice, with the "last updated" date at the top of the page revised accordingly.
• Continued use of the huat21 platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account before the effective date.
• The latest version of huat21's Privacy Policy is always available on this page. We encourage members to check this page periodically to stay informed about how we manage your personal data.