Privacy Policy ik21 – Transparent Personal Data Protection for Malaysian Players

Welcome to the ik21 Privacy Policy. This document forms part of the Terms & Conditions ik21 sets out in detail how we — as the operator of the ik21 online casino platform in Malaysia — handle your personal data responsibly and transparently.

Ik21 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All Malaysian players who register and use the ik21 platform are subject to this Privacy Policy. By creating an ik21 account, or by continuing to use the platform after this Privacy Policy has been updated, you are deemed to have read, understood, and agreed to all terms set out herein.

We understand that Malaysian players place great importance on the security and privacy of their personal information in today's digital age. That is why ik21 invests seriously in security infrastructure, staff training, and monitoring systems to ensure your data is always kept safe and handled with complete integrity.

Ik21 collects various categories of personal data from users at different stages of platform use. Below are the categories of data we collect and their sources:

Data You Provide Directly:

• Full name as stated on your Malaysian identification document (MyKad / Passport).
• An active Malaysian mobile number (used for OTP verification).
• An active email address (for account communications and promotions).
• Date of birth (to verify the minimum age eligibility of 21 years).
• MyKad number or passport number (for KYC/identity verification purposes).
• Bank account or digital wallet details (for processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks).

Automatically Collected Data:

• The IP address of the device used to access the ik21 platform.
• The type and version of web browser used.
• Device operating system (Android, iOS, and others).
• Gaming activity records, including bets placed, wins and losses.
• Financial transaction records, including deposits and withdrawals.
• The date, time and duration of each login session on the ik21 platform.
• Cookie data and similar tracking technologies (described in further detail in Section 6).

Data from Third Parties:

• Identity verification information from approved KYC (Know Your Customer) service providers.
• Information from ik21's partner digital wallet providers and banks for transaction verification purposes.
• Information from recognised fraud prevention agencies and blacklist databases to protect the integrity of the ik21 platform.

Ik21 uses the personal data collected for the following legitimate and necessary purposes in the operation of the platform:

• Account Management: To create, verify, and manage your ik21 account, including the registration process, identity verification (KYC), and age verification.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your bank account or digital wallet, securely and accurately.
• Gaming Services Provision: Gives you access to all games on the ik21 platform, including video slots, classic slots, card games, live casino, and crash games.
• Customer Support: Responding to your enquiries, complaints and support requests via LiveChat and email promptly and effectively.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and any activity that violates ik21's terms.
• Legal Compliance: Fulfilling Malaysian legal obligations, including mandatory reporting to the relevant authorities.
• Platform Improvements: Analysing usage patterns (on an aggregated, non-individually identifiable basis) to improve the user experience and the technical performance of the ik21 platform.
• Marketing Communications: Sending information about ik21's latest promotions, bonuses and offers – only to users who have given their consent to receive such communications.

Ik21 does not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent.

Ik21 may share your personal data only in the following limited circumstances:

• Service Providers: We share the necessary data with third-party service providers that support ik21's operations, such as KYC service providers, payment processors (Touch 'n Go, GrabPay, DuitNow, FPX, and others), and technical infrastructure providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.
• Legal Requirements: ik21 will disclose personal data to Malaysian authorities (including Bank Negara Malaysia, the Royal Malaysia Police, or the courts) where required by a court order, writ, or applicable provision of Malaysian law.
• Financial Crime Prevention: In situations where ik21 suspects money laundering or terrorism financing, we are both entitled and obligated to report and share relevant information with the appropriate Malaysian financial authorities.
• Business Sale or Merger: Should ik21 undergo a merger, acquisition, or asset sale, user data may be transferred to the new entity, provided that entity maintains a level of data protection equivalent to or greater than that described in this Privacy Policy.

Ik21 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction. These security measures include:

• End-to-End Encryption: All data in transit is protected with 256-bit SSL/TLS encryption. Sensitive data stored in our databases is also encrypted using industry-standard encryption algorithms.
• Strict Access Control: Only authorised ik21 personnel are permitted to access users' personal data, and solely for legitimate work purposes. All access is logged and continuously monitored.
• Two-Factor Authentication: ik21's internal systems require two-factor authentication for all staff access to systems that store user data.
• Regular Security Audits: ik21 conducts regular penetration testing and security audits by qualified independent parties to identify and address any system vulnerabilities.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to security threats promptly.
• Staff Training: All ik21 staff who handle user data undergo regular information security training to ensure best practices are maintained at all times.

The ik21 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and deliver relevant content. Cookies are small text files stored in your web browser when you visit the ik21 platform.

Types of Cookies Used by ik21:

• Essential Cookies: Required for the core operation of the ik21 platform, including login authentication, session security, and game functionality. These cookies cannot be disabled without affecting platform performance.
• Performance & Analytics Cookies: Collects information on how users interact with the ik21 platform (e.g. most frequently visited pages, time spent in each section) to help us improve the user experience. This data is processed in aggregate form without identifying individual users.
• Functional Cookies: Stores user preferences such as interface language, game settings, and display options to deliver a more personalised experience each time you log in.
• Marketing Cookies: Used to display relevant ik21 promotional content to you — activated only with your consent. You may withdraw this consent at any time through your browser's cookie settings.

You can control and manage cookies through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to log in and use the ik21 platform normally. For more information on how to manage cookies in your browser, please refer to your web browser's help documentation.

As an ik21 member and a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the rights above, please contact ik21's Data Protection Officer (DPO) at [email protected] or [email protected]. ik21 will process your request within 14 business days and may require identity verification before proceeding with requests involving data access, correction, or deletion.

Ik21 does not permit any individual under the age of 21 to register or use the platform. We enforce age verification processes at the point of registration and during withdrawal to ensure compliance with this policy.

If ik21 discovers that personal data of a minor has been inadvertently collected without proper age verification, we will take immediate steps to delete that data and close the associated account. If you believe that someone under the age of 21 has registered an ik21 account, please notify us immediately at [email protected] so that appropriate action can be taken.

Ik21 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. ik21's data retention guidelines are as follows:

Once the relevant retention period has ended, your personal data will be securely deleted in accordance with ik21's established data deletion procedures, or anonymised so that it can no longer be linked to you personally.

The ik21 platform may contain references or links to third-party services such as payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks) and game software providers. When you access these third-party services, ik21's Privacy Policy no longer applies and you will be subject to the respective third party's own privacy policy.

Ik21 is not responsible for the privacy practices, content, or security of any third-party platform or service. We recommend reading the privacy policy of each service provider you use to understand how they handle your personal data.

Ik21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in business practices, Malaysian legal requirements, or the technologies we use. Any amendments will take effect upon the publication of the updated Privacy Policy on this page with a new effective date.

For material changes that significantly affect your privacy rights, ik21 will endeavour to notify you in advance via email notification or an in-platform notice before the changes take effect. Your continued use of the ik21 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

We recommend that you review this Privacy Policy page periodically to stay informed of how ik21 handles your personal data. The "Last Updated" date at the top of this page will always reflect the most current version in effect.

If you have any questions, concerns or complaints regarding how ik21 handles your personal data, or if you wish to exercise any of the rights outlined in this Privacy Policy, please contact us through the following channels:

For requests relating to data access, correction, deletion or any other data rights, please include the following in your email: your full name, your ik21 account number, the type of request being made, and a copy of a valid Malaysian identity document for verification purposes. This will help us process your request more quickly and accurately.