Reference

How kaki21 Handles Your Personal Information

Your account data belongs to you — we collect only what we need to keep your kaki21 experience running smoothly, from wallet top-ups via Touch 'n Go eWallet or Boost to account verification and session security.

Data collected only when necessaryPayment details handled under encryptionYour right to access or remove dataNo selling of personal information to third partiesRetention tied to account activity
kaki21 How kaki21 Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct or remove information we hold on your account, our support team handles privacy requests directly. Reach us through live chat from your account dashboard, by email at the address listed in your account settings, or through the in-app message thread. We aim to acknowledge every data request and follow up with a resolution path — response times depend on request complexity, but we treat privacy queries with the same priority as account issues.

Team online

Live Chat

Start a chat session from your account dashboard. Our team can pull up your account data record and walk you through what we hold on file.

Email Support

Send a data access or removal request to the email address shown in your account settings. Include your registered contact detail so we can verify your identity.

In-App Message

Use the message thread inside your account to raise a privacy concern. Replies are logged to the same thread so you have a record of the exchange.

DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Data protection at kaki21 is operational, not just a statement. Four pillars cover how we handle what you share with us — from the moment you tap to deposit via GrabPay through to how long your records stay on our system and what happens when you request deletion.

Encryption at Every Step

All data exchanged between your device and our servers travels over SSL encryption. Payment references from Boost, GrabPay and Touch 'n Go eWallet are stored in tokenised form — raw credentials never sit in our database.

Cookie Use and Your Control

We use session cookies to keep you logged in and analytical cookies to understand how the account dashboard is used. You can adjust cookie preferences through your browser settings at any time without affecting your account access.

Retention and Deletion

Account data is kept while your account is active. When you close your account, personal data is scheduled for deletion within the period required by applicable law — transaction records may be held longer where regulations require it.

No Third-Party Data Sales

Your personal data is never sold to advertisers or data brokers. We share information with payment processors — such as the networks behind Touch 'n Go eWallet and DuitNow — only to the extent needed to complete your transaction.

Common Questions About Your Privacy on kaki21

From George Town to Johor Bahru, players using kaki21 across Malaysia ask similar questions about what we store and what rights they hold. These answers cover the most common privacy concerns we hear from account holders.

We collect your name, contact details and the payment method you register — such as Touch 'n Go eWallet or GrabPay. Device and session data is also logged automatically at each login for security purposes.

Yes. Submit a data access request through live chat or email using the contact in your account settings. We will compile a summary of the personal data tied to your account and send it to your registered contact.

Contact our support team via live chat or the in-app message thread and request account closure with data deletion. We will process the request in line with our retention schedule and applicable local law requirements.

Only with the payment processors needed to complete your transaction — for example, the network handling your Boost or DuitNow transfer. We do not share payment references with advertisers or unrelated third parties.

Personal data is flagged for deletion after you close your account, within the window required by applicable regulation. Transaction records tied to payment compliance may be retained for a longer mandatory period.

Session logs — device type, IP address and login timestamps — are kept for a limited period to support fraud detection and account dispute resolution. They are not used for advertising profiling and are not sold to third parties.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.