Kaca21 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

1 Introduction & Scope of This Privacy Policy

Welcome to the kaca21 Privacy Policy. This document outlines the privacy practices of the kaca21 platform ("kaca21", "we", or "the platform") regarding the collection, use, storage, and protection of your personal information as a user and player of our Malaysia-based online casino platform.

This Privacy Policy applies to all information we collect through the kaca21 website, including during the account registration process, use of gaming services, financial transactions, and any communications between you and the kaca21 team. By registering an account or using the kaca21 platform, you hereby consent to the collection and use of your information as described in this Privacy Policy.

Kaca21 believes that player trust is the foundation of our sustainable operations. We do not take lightly our responsibility to protect the privacy of our more than 500,000 registered members across Malaysia — from Kuala Lumpur to Kota Kinabalu, from Ipoh to Kuching. This Privacy Policy is written in clear, straightforward language, not confusing legalese.

2 Types of Personal Data We Collect

2.1 Information You Provide Directly

Kaca21 collects information you provide directly when interacting with our platform, including:

• Registration Data: Full name, Malaysian phone number, email address (if provided), and an encrypted password.
• Verification Data: Copies of identity documents (MyKad or passport) submitted during the account verification process or for large withdrawal requests.
• Communication Data: Records of live chat conversations, emails, and any written communications you have submitted to the kaca21 support team.
• Account Information: Game preferences, account settings, self-imposed limits, and account activity history.

2.2 Automatically Collected Data

When you use the kaca21 platform, certain technical information is automatically collected for security and service improvement purposes:

3 How kaca21 Uses Your Data

Kaca21 uses collected personal data solely for legitimate purposes that are directly related to providing our online casino platform services to players in Malaysia. These purposes are:

3.1 Account Management & Services

Your data is used to create and manage your kaca21 account, process deposits and withdrawals in MYR, verify your identity for account security, and ensure you receive the services you have subscribed to. Without this essential information, we are unable to provide you with a safe and fully functional online casino experience.

3.2 Security & Fraud Prevention

Kaca21 analyses usage patterns and transaction data to identify and prevent fraudulent activity, money laundering, multi-account usage, and any behaviour that violates the platform's Terms & Conditions. This protects not only kaca21's interests but, more importantly, the interests of honest players who use the platform responsibly.

3.3 Legal & Regulatory Compliance

Some data is collected and retained to fulfil applicable legal compliance obligations, including anti-money laundering (AML) requirements and know your customer (KYC) procedures. kaca21 complies with all relevant legal requirements in the management of player data.

3.4 Platform Improvement & User Experience

Aggregated and anonymised data is used by the kaca21 technical team to understand how players use the platform, identify technical issues, and continuously improve the overall gaming experience. For example, usage data helps us identify the most popular jackpot slots among Malaysian players and ensure they are always performing at their best.

3.5 Service-Related Communications

Kaca21 uses your phone number and email address to send important account-related information — such as transaction confirmations, security notifications, and policy updates. You cannot opt out of these communications as they form part of the account service. For marketing and promotional communications, you may opt out at any time through your kaca21 account settings.

4 Data Sharing & Disclosure to Third Parties

Kaca21 does not sell players' personal data. This is a policy that will never change. However, there are limited circumstances in which we may need to share certain information with third parties:

4.1 Trusted Service Providers

Kaca21 works with carefully selected third-party service providers to support platform operations — including licensed casino game providers, MYR payment processors (Touch 'n Go, GrabPay, DuitNow, and others), cloud service providers, and analytics tools. All such service providers are bound by strict data protection agreements and may only use shared data for purposes specified by kaca21.

4.2 Legal Requirements

Kaca21 may disclose player information to relevant law enforcement authorities or regulators where required by law, court order, or legitimate investigative necessity. In such circumstances, kaca21 will take reasonable steps to notify the player concerned — unless such notification is prohibited by law.

4.3 Protection of kaca21's Rights

In cases involving suspected fraud, platform abuse, legal claims, or disputes involving kaca21, we reserve the right to disclose information necessary to defend the legal interests of the platform, other players, or the general public — to the extent permitted by law.

5 kaca21 Data Security Measures

Kaca21 continuously invests in cybersecurity infrastructure to ensure player data remains protected at the highest practicable level. The technical and organisational security measures we have implemented include:

• Encryption in Transit: All data transferred between your browser and kaca21's servers is protected by TLS 1.3 with AES-256 encryption — the same standard used by global financial institutions.
• Encryption at Rest: Passwords are stored using a strong one-way hashing function. Other sensitive data is stored in encrypted form on kaca21 servers.
• Layered Access Control: A role-based access control (RBAC) system ensures that kaca21 staff can only access data required for their specific duties. All internal data access is logged and auditable.
• 24/7 Security Monitoring: kaca21's information security team continuously monitors platform activity to detect and respond to any suspicious threats or anomalies.
• Regular Security Testing: kaca21 conducts regular penetration testing and vulnerability assessments through independent security firms to identify and remediate any weaknesses before they can be exploited.
• Incident Management: Tested incident response procedures ensure that any data breach can be identified, contained, and addressed promptly — with potentially affected players notified within 72 hours.

While kaca21 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your account safe — use a strong password, never share your login credentials with anyone, and report any suspicious activity to the kaca21 support team promptly.

6 Data Retention Period

Kaca21 retains players' personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. As a general guide:

• Active Account Data: Retained for as long as your account remains active on kaca21 and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in accordance with applicable financial compliance and tax legislation in Malaysia.
• Support Communication Records: Retained for a minimum of three (3) years for reference purposes and resolution of any disputes that may arise.
• Usage Data & Technical Logs: Technical log data is typically retained for a period of 12 to 24 months, depending on operational requirements.
• Identity Verification Data: Identity verification documents submitted are retained for the duration of the active account and for a minimum of five (5) years after account closure for AML compliance purposes.

When data is no longer needed and there is no legal obligation to retain it, kaca21 will securely delete or destroy that data using approved data disposal procedures.

7 Your Rights Over Personal Data

As a kaca21 player, you have several important rights regarding your personal data. kaca21 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the kaca21 privacy team by email at support@kaca21.click clearly stating the right you wish to exercise along with your account information for identity verification purposes. kaca21 is committed to processing and responding to all privacy rights requests within 14 working days from the date of receipt of the completed request.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the kaca21 website. They help our platform remember your preferences, maintain your secure login session, and allow us to understand how players use the platform so we can continuously improve it.

8.2 Types of Cookies Used by kaca21

• Essential Cookies: Required for core platform functionality, including login authentication, session security, and language preferences. Without these cookies, the kaca21 platform will not function properly and they cannot be disabled.
• Analytics Cookies: Helping kaca21 understand how players interact with the platform — the most frequently visited pages, session duration, and most-used features. This data is used in aggregated, anonymised form for platform improvement purposes.
• Preference Cookies: Saves your personal settings such as preferred language and display preferences to ensure a more consistent experience each time you log in to kaca21.
• Security Cookies: Helps kaca21's security systems detect and prevent fraudulent activity by identifying suspicious sessions or unauthorised access attempts.

8.3 Managing Cookies

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the kaca21 platform and your overall gaming experience. Please refer to your browser's help documentation for more information on how to manage cookies on your device.

9 Cross-Border Data Transfers

As a platform that operates on cloud infrastructure and international game providers, some kaca21 data may be processed or stored on servers located outside Malaysia. This is standard practice across the global technology industry.

When data is transferred outside Malaysia, kaca21 ensures that such transfers are protected by:

• Contractual data protection agreements with all international data recipients.
• Technical security standards that are equal to or exceed the level of protection we provide in Malaysia.
• Use of service providers holding recognised data security compliance certifications such as ISO 27001 or SOC 2.

Kaca21 does not transfer data to countries or regions with inadequate data protection standards without appropriate additional safeguards in place. The most sensitive financial data is processed by Malaysian MYR payment providers such as Touch 'n Go, GrabPay, and DuitNow, which operate entirely within Malaysia's regulatory framework.

10 Child Protection & Underage Individuals

Kaca21 takes child protection extremely seriously. Our platform is strictly intended for individuals aged 21 years and above and we do not knowingly collect or process personal data from individuals below that age.

If we detect or are made aware that personal data belonging to someone under the age of 21 has been collected without our knowledge, kaca21 will take immediate action to:

• Deactivating the associated account immediately.
• Deleting all data collected from that individual.
• Returning any outstanding financial balance.
• Taking steps to prevent similar incidents from occurring in the future.

If you have reason to believe that someone under the age of 21 has accessed the kaca21 platform, please contact us immediately at support@kaca21.click so that we may take the appropriate action.

11 Policy Updates & How to Contact Us

11.1 Privacy Policy Amendments

Kaca21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or new platform features. Any material amendments to this Privacy Policy will be communicated to players via in-platform notifications or messages to their registered phone number before the changes take effect. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

11.2 Contact the kaca21 Privacy Team

For any enquiries, concerns, or requests relating to your privacy and data protection at kaca21, please contact us through the following channels:

• Email: support@kaca21.click (please write "Privacy" in the email subject line)
• Live Chat: Available 24 hours a day on the kaca21 platform – average response time under 3 minutes
• Privacy Request Response Time: Within 14 business days from the date of receipt of a completed request