d21 Privacy Policy – Data Protection for Malaysian Players

D21 takes user privacy extremely seriously. This Privacy Policy clearly and transparently explains how the d21.life platform collects, processes, stores, and protects your personal information as a registered player or visitor to our website.

We understand that your trust in d21 depends largely on the confidence that your personal and financial information is handled with the utmost responsibility. That is why d21 invests in state-of-the-art security infrastructure and enforces strict data handling practices at every level of platform operations.

This Privacy Policy applies to all users of the d21 platform in Malaysia — whether you are a registered player, a visitor browsing without an account, or a player interacting with our customer support. It covers all products on the d21 platform, including Live Casino, Sports Betting, Roulette, Virtual Sports, cricket and the VIP Rewards programme.

D21 collects your personal data through several channels — directly when you complete the registration form, automatically as you use the platform, and through interactions with our customer support team. The categories of data we collect are as follows:

Data collected automatically via cookies and similar technologies is described in further detail in Section 6 of this document. d21 only collects data that is genuinely necessary to provide its services — we do not collect excessive or irrelevant information.

D21 uses the personal data it collects for the following purposes. Each purpose has a clear legal basis, and we do not use your data beyond the scope stated here:

Account Management & Services:

• Creating, verifying, and managing your d21 account.
• Processing deposits and withdrawals in MYR via local payment methods including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks.
• Managing the VIP Rewards programme, including VIP points calculation, tier determination, and the distribution of weekly cashback and monthly reload bonuses.
• Providing customer support in Bahasa Melayu via Live Chat, email and WhatsApp.

Security & Compliance:

• Verifying player identity (KYC — Know Your Customer) to meet industry compliance requirements and prevent fraud.
• Detecting and preventing fraudulent activity, money laundering, duplicate account creation, and automated bot usage.
• Complying with legal and regulatory requirements applicable to the operation of an online betting platform.
• Maintaining audit logs for investigation and dispute resolution purposes.

Platform Improvements:

• Analysing usage patterns to improve the interface, speed and usability of the d21 platform.
• Understanding the games and products most popular among Malaysian players to guide product development decisions.
• Testing new features and monitoring overall platform performance.

Communications & Marketing (with your consent):

• Sending notifications about promotions, bonuses, and special offers relevant to your activity on d21.
• Notifying you of platform updates, changes to terms, or security issues that require your immediate attention.
• Sending periodic newsletters about new d21 products and special events (only where you have given consent for marketing communications).

D21 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Data security isn't an afterthought here — it's built into every layer of the platform's infrastructure from day one.

Technical measures implemented by d21:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and d21's servers is encrypted using 256-bit SSL/TLS protocol — the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB.
• Data-at-rest encryption: Sensitive data stored in d21's databases — including identity information and financial records — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): All d21 accounts can be secured with an additional layer of verification via an OTP code sent to your registered phone number whenever you log in from a new device or an unfamiliar location.
• 24/7 security monitoring: d21's automated monitoring system runs around the clock to detect unusual activity, unauthorised access attempts and suspicious transaction patterns.
• Role-based access control: d21 staff only have access to the data required to carry out their specific roles — no single individual has full access to all player data.
• Regular security audits: The d21 platform undergoes regular independent penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

D21 does not sell, rent or trade personal data of players to any third party for marketing, advertising or commercial purposes. However, there are limited situations where d21 needs to share data with certain parties in order to operate the platform effectively. All such data sharing is subject to strict data protection agreements.

Third parties that may receive your data and the reasons why:

• Payment processors: E-wallet and banking service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information necessary to process your deposits and withdrawals. Data shared is strictly limited to what is required to complete the transaction.
• Game providers: Game developers providing Live Casino, slots and other game content on the d21 platform may receive anonymised account identifiers for technical integration and statistical reporting purposes.
• IT service providers: Companies that provide server infrastructure, cloud services, platform analytics and cybersecurity tools may process certain data as part of the services they deliver to d21. All such providers are bound by strict data processing agreements.
• Legal authorities: d21 will disclose player data to the relevant authorities when required by law — for example, in investigations involving fraud, money laundering, or pursuant to a valid court order. d21 will not disclose data beyond what is legitimately required by law.

Like most modern web platforms, d21 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage on an aggregate basis. The following are the types of cookies used by d21:

Essential Cookies (Required): These cookies are required for the basic functioning of the d21 platform and cannot be disabled without significantly affecting your experience.

• Session cookies: Storing your login information so you remain signed in throughout an active session without having to re-enter your password each time you navigate between pages.
• Security cookies: Used to detect suspicious activity, prevent cross-site request forgery (CSRF), and maintain the integrity of your session.
• Optional cookies: Saving your language settings, display preferences and interface configurations so you don't have to reconfigure them each time you visit the platform.

Analytics Cookies (Optional): These cookies help d21 understand how players interact with the platform so we can make meaningful improvements. Data collected is aggregated and is not used to identify individual players.

• Most visited pages and most popular products among Malaysian players.
• Commonly used navigation paths and exit points where users leave the platform.
• Technical performance metrics such as page load times and error rates.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the d21 platform, including your ability to log in to your account.

As a registered d21 player, you have certain rights regarding your personal data. d21 is committed to respecting and facilitating the exercise of these rights to the fullest extent possible. Below are the rights you hold and how to exercise them:

To exercise any of the rights above, contact d21's privacy team by emailing support@d21.life with the subject line "Privacy Rights Request", specifying which right you wish to exercise and the details of your request. d21 will process your request within 30 business days.

D21 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. Once the data is no longer needed, it will be securely deleted or anonymised.

Retention periods by data category:

• Active account information: Retained for the entire duration that your d21 account remains active.
• Financial transaction records (deposits, withdrawals): Retained for a minimum of 7 years from the date of the transaction — a standard compliance requirement under financial industry and anti-money laundering (AML) regulations.
• Game and betting records: Retained for 3 years for dispute resolution and audit purposes, after which the data is deleted or anonymised.
• Customer support communication logs: Retained for 2 years after the last interaction for service reference and improvement purposes.
• Technical data (server logs, IP addresses): Retained for 12 months for security and forensic purposes, then permanently deleted.
• Closed account information: Basic identity information is retained for 5 years after account closure for legal compliance, after which it is fully anonymised.

After the specified retention period, your data will be securely deleted from all d21 systems using methods that ensure the data cannot be recovered.

The d21 platform is for individuals aged 18 and above only. d21 does not knowingly collect or process personal data from individuals under the age of 18. Account registration by minors is strictly prohibited and constitutes a violation of d21's Terms and Conditions.

During the registration process, all prospective users are required to confirm that they are at least 18 years of age. d21 conducts age verification as part of its identity verification (KYC) process to ensure compliance with this requirement.

D21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data handling practices, new legal requirements or enhancements to privacy protection. Any material amendments will be communicated to you via:

• In-platform notifications when you are logged in to your d21 account.
• Email sent to the address registered to your account.
• Notices displayed prominently at the top of this Privacy Policy page.

The "Updated" date at the top of this document reflects the date of the most recent version. You are encouraged to review this page periodically. Your continued use of the d21 platform after any policy amendment takes effect will be considered your acceptance of the updated Privacy Policy.

If a proposed amendment materially reduces your privacy rights, d21 will provide at least 14 days' notice before the amendment takes effect, giving you time to review the changes and decide whether to continue using the platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the way d21 handles your personal data, you can reach us through the following channels:

• Live Chat: Available 24/7 directly from the d21 platform — the fastest way to get an immediate response in Bahasa Malaysia.
• Email: support@d21.life — use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" to help us process your message faster.
• Response time: d21 is committed to responding to all privacy-related enquiries within 48 business hours and resolving privacy rights requests within 30 business days.