Kaki21 takes every member's privacy seriously. This document transparently explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.
All data transmitted between your browser and kaki21's servers is protected with 256-bit SSL encryption — the same technology used by Malaysia's major banks such as Maybank and CIMB.
Kaki21 has never and will never sell, rent, or share members' personal information with third parties for marketing purposes. Your data belongs to you — it is not a commodity for us to profit from.
Kaki21's privacy policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that your legal rights as a Malaysian user are completely protected.
Welcome to the kaki21 Privacy Policy. This document outlines the privacy practices of the kaki21 platform, operating at https://kaki21.ws — a trusted online betting platform built specifically for Malaysian players.
At kaki21, we understand that trust is the foundation of our relationship with every member. When you register and use our platform, you entrust us with your personal information — and we don't take that lightly. This policy is written in plain, straightforward language because we believe you deserve to know exactly what happens to your data, not just vague reassurances that mean nothing.
This Privacy Policy applies to all information collected through the kaki21 website, including during account registration, use of services, interactions with the customer support team, and all digital communication channels associated with kaki21.
PDPA Compliance: kaki21 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Any processing of your personal data is carried out on a lawful basis, for stated purposes, and no further than what is necessary.
Kaki21 only collects information that is genuinely necessary to provide our services safely and effectively. Below are the categories of data we collect and the reasons for doing so:
| Data Type | Example | Primary Purpose |
|---|---|---|
| Identity Information | Full name, MyKad number | Identity verification, fraud prevention |
| Contact Information | Malaysian phone number, email address | OTP verification, account communications |
| Financial Information | Bank account / eWallet account name and number | Processing deposits & withdrawals |
| Login Information | Username, password (encrypted) | Account security, access control |
| Communications Data | Live chat records, support emails | Troubleshooting, service improvement |
When you use the kaki21 platform, our systems automatically record certain technical information required for platform security and operations:
Kaki21 not store your full credit/debit card numbers, PIN, or online banking passwords. All financial transactions are processed through licensed third-party payment gateways — we only receive transaction status confirmations, not your sensitive financial details.
Every piece of data kaki21 collects is used for a specific purpose that directly benefits you as a member. Here is how we use your information:
In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), kaki21 processes your personal data on the following lawful bases:
Kaki21 maintains a strict policy on member data sharing. In short: we do not sell or rent your data to anyone. However, there are limited circumstances in which we need to share information with trusted third parties:
Information required to process transactions is shared with licensed payment gateways that handle your deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. These providers are bound by strict confidentiality agreements and may only use your data to process the relevant transactions.
To operate live casino games, slots, and virtual sports, kaki21 works with licensed game software providers. They may receive session data required for technical operations, but do not receive any personally identifiable information that could be used to identify you directly.
Kaki21 will disclose member information to Malaysian authorities (such as the police, courts, or anti-corruption agencies) where required to do so by a court order or applicable Malaysian law. In such circumstances, we will endeavour to notify you where permitted by law.
Our Absolute Guarantee: kaki21 does not share members' personal data with advertisers, data brokers, or third-party marketing companies for targeted advertising purposes. Your data is not for sale.
Kaki21 invests seriously in security infrastructure to ensure your data is always protected. The following are the security layers we have implemented:
All communication between your device and kaki21's servers is encrypted using TLS 1.3 with 256-bit key length — the highest industry standard available.
Members can enable 2FA in their account security settings for an extra layer of protection — every login will require OTP verification sent to your Malaysian phone number.
Sensitive information such as passwords is stored in irreversible hashed form. Financial information is stored in encrypted format on protected servers.
Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
Only kaki21 staff who require access to specific data in order to perform their duties will be granted permission — based on the principle of least privilege.
Data is regularly backed up to a secure, separate location. Data recovery procedures are periodically tested to ensure continuity of service.
While kaki21 takes all reasonable steps to protect your data, no system is 100% secure. If you suspect your account has been accessed without authorisation, please contact us immediately at support@kaki21.ws.
Kaki21 does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and legal requirements:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout the active account period | Required for ongoing account management |
| Financial transaction records | 7 years after transaction | Malaysian accounting and statutory requirements |
| Security & access logs | 12 months | Security audits and incident investigations |
| Customer support records | 3 years | Historical reference and dispute resolution |
| Identity verification data (KYC) | 5 years after account closure | Anti-money laundering requirements |
| Marketing data (with consent) | Until consent is withdrawn | Legal basis for processing is consent |
Once the relevant retention period has expired, data will be securely deleted or anonymised using methods that make it permanently impossible to re-identify you.
As a kaki21 member and a Malaysian citizen or resident, you have the following rights regarding your personal data under PDPA 2010:
You may request a copy of the personal data we hold about you at any time by emailing support@kaki21.ws.
If any of your data is inaccurate or outdated, you have the right to request a correction through your account settings or by contacting support.
You may request the deletion of your personal data when it is no longer needed for its original purpose, subject to our legal obligations.
You may object to the processing of your data for direct marketing purposes at any time by contacting us or using the unsubscribe option in our emails.
You have the right to receive the data you have provided to us in a structured, machine-readable format for transfer to another platform.
In certain circumstances, you may request that we restrict the processing of your data while any dispute or review is ongoing.
To exercise any of these rights, contact us at support@kaki21.ws with the subject line "Privacy Rights Request" along with your account ID number. kaki21 is committed to responding to your request within 30 business days.
Kaki21 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. The following are the types of cookies we use:
| Cookie Type | Status | Function | Retention Period |
|---|---|---|---|
| Session Cookies | Maintaining your login session so you don't have to log in repeatedly while using the platform | Until log-out | |
| Security Cookies | Preventing CSRF attacks and ensuring that every action taken within an account is legitimate | Until log-out | |
| Preference Cookies | Saves your interface preferences such as language, layout, and display settings | 30 days | |
| Analytics Cookies | Helps us understand how members use the platform for improvement purposes — data is anonymised | 90 days |
You can manage or delete cookies through your web browser settings. However, removing essential cookies may affect the functionality of the kaki21 platform. Optional cookies can be disabled without impacting core features.
The kaki21 platform may contain links to third-party websites for your convenience. This Privacy Policy applies solely to the kaki21 platform. kaki21 is not responsible for the privacy practices of third-party websites and encourages you to read their respective privacy policies before providing any personal information.
This includes payment provider websites such as the Maybank2u or CIMB Clicks portals that you may visit during the deposit or withdrawal process — each of those providers has its own privacy policy that applies to your direct interactions with them.
Kaki21's services are for individuals aged 18 and above only. kaki21 does not knowingly collect or process personal data from individuals under the age of 18.
If kaki21 discovers that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian who believes your child has registered an account with kaki21, please contact us immediately at support@kaki21.ws.
Kaki21 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or technological developments. Any amendments will:
Continued use of the kaki21 platform after the effective date of any amendments constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by kaki21, please contact us through the following channels:
Kaki21 is committed to responding to all privacy-related enquiries within 30 business days of receiving your request. For complex matters requiring further investigation, we will keep you updated on the progress within the same timeframe.
FAQs on privacy and account security are also available on the FAQ us for your immediate reference.
All transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX are processed by licensed payment gateways. kaki21 does not store your bank account or eWallet details on our servers.
Kaki21's security infrastructure undergoes regular audits by independent cybersecurity firms to ensure member data protection remains in line with the latest standards.
Kaki21 maintains detailed internal records of all data processing activities — who accessed what, when, and for what purpose — ensuring full accountability at every level.
With 256-bit SSL protection, Malaysia PDPA compliance, and a strict no-data-sale policy, you can focus on what matters — enjoying your favourite Sports Betting, Live Casino, and slots.
Free registration. Your data is fully protected. For adults aged 18 and above only.