Dunia21 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy outlines the personal data management practices followed by the dunia21 platform (dunia21.biz) in handling the personal information of all registered members and visitors to our website. This document has been prepared in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering as a dunia21 member or using any of our services, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the dunia21 platform and contact us to close your account.

Dunia21 collects personal data through two primary methods: information you provide directly, and information collected automatically when you use our platform.

Information you provide directly:

• Identity information: full name, national ID or passport number, date of birth, gender, and nationality.
• Contact details: active email address, mobile phone number, and current residential address in Malaysia.
• Financial information: deposit method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or other FPX options), associated account numbers, and the full transaction history in Malaysian Ringgit (MYR).
• KYC verification documents: copies of your national identity card, passport, or proof of address documents.

Automatically collected information:

• Technical data: IP address, device type (Android/iOS/desktop), web browser used, operating system, and screen resolution.
• Activity data: pages visited, time spent in each section, types of games played (slots, live casino, football, roulette, esports, lottery, jackpot), and betting records.
• Session data: login and logout times, session duration, and general usage patterns.

Personal data collected by dunia21 is used solely for legitimate, clearly stated purposes. The following are the primary purposes for which your data is used:

• Account Operations: To create and manage your dunia21 member account, including processing registration, login, and profile settings.
• Transaction Processing: Securely processing all deposits and withdrawals in Malaysian Ringgit (RM) through your preferred payment method.
• Identity Verification: Conducting KYC processes to ensure account security and comply with anti-money laundering legislation.
• Service Provision: To ensure you can seamlessly access all games and features on the dunia21 platform, including slots, live casino, football, roulette, and jackpot.
• Important Communications: Sending account-related notices, transaction confirmations, security updates, and other important information relevant to your use of the platform.
• Security & Fraud Detection: To detect and prevent suspicious activity, fraud, or violations of the Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support related to their gaming habits and offering appropriate assistance.
• Platform Improvements: Analysing aggregated usage data to improve the design, performance, and overall experience of the dunia21 platform.

Dunia21 does not sell or trade members' personal data to any third party. However, in certain limited situations, data may be shared with the following parties:

• Payment Service Providers: E-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive only the data necessary to process your transactions. They are subject to their own respective privacy policies.
• Game Providers: Third-party gaming platforms that provide slots, Live Casino, and other games may receive limited session data required for the technical operation of those games.
• Technology Service Providers: Companies providing infrastructure, hosting, analytics, and cybersecurity services to dunia21, subject to strict confidentiality agreements.
• Legal Authorities: Where required by Malaysian law, we may be obligated to disclose data to law enforcement agencies or regulatory bodies.

Dunia21 implements multiple layers of technical and organisational safeguards to ensure members' personal data is always protected against unauthorised access, alteration, disclosure, or accidental deletion:

• 256-bit SSL Encryption: All communications between your device and dunia21's servers are encrypted using 256-bit SSL/TLS — the same standard used by Malaysia's leading banking institutions.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted at rest on our servers using AES-256 standards.
• Strict Access Controls: Only authorised personnel with a legitimate operational need are permitted to access member personal data. All access is audited and logged.
• Continuous Monitoring: Our security monitoring system operates 24/7 to detect and respond to any threats or suspicious activity in real time.
• Regular Security Testing: dunia21 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Data Backup: Data is regularly backed up to secure, separate locations to ensure operational continuity and protection against data loss.

Dunia21 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. The data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active, plus any additional period required by law following account closure.
• KYC & Identity Verification Data: Retained for a minimum of 5 years after account closure, in line with Malaysia's Anti-Money Laundering (AMLA) legal requirements.
• Financial Transaction Records: Retained for 7 years as required under Malaysian financial law.
• Gaming Data: Retained for 3 years for dispute resolution and regulatory compliance purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.
• Technical Data & Logs: Retained for 12 months for security and technical troubleshooting purposes.

Once the relevant retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to any individual.

As a dunia21 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request corrections to any data that is inaccurate, incomplete, or out of date.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, taking into account any applicable legal retention obligations.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data under certain circumstances, such as when the accuracy of your data is in dispute.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact the dunia21 support team via 24/7 live chat or email us at support@dunia21.biz. We will process your request within 14 business days.

The dunia21 platform uses cookies – small text files stored in your web browser – to enhance your experience and security while using our website. We use several types of cookies:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the dunia21 platform.

In certain cases, dunia21 members' personal data may need to be transferred or processed outside Malaysia, for example when using cloud computing services or international technical infrastructure. In all such cases, dunia21 ensures that:

• Data transfers are carried out only to countries or organisations that provide a level of data protection equivalent to or greater than that required under Malaysia's PDPA.
• Appropriate data transfer agreements, including standard contractual clauses, are in place to safeguard your rights.
• All parties receiving data in international transfers are bound by the same confidentiality and security obligations as those enforced in Malaysia.

The dunia21 platform is strictly for adults aged 21 and above. We do not knowingly collect any personal data from individuals under the age of 21.

Should we discover that data has been collected from an individual under the age of 21 without proper age verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their underage child has registered on dunia21 are urged to contact us immediately at support@dunia21.biz.

While dunia21 takes all reasonable precautions to protect member data, we acknowledge that no system is entirely immune to all cyber threats. In the event of a data breach involving members' personal data:

• The dunia21 security team will assess the severity and scope of any breach within the first 24 hours.
• Affected members will be notified via their registered email within 72 hours of a confirmed breach, including details of the type of data affected and the steps they should take.
• Relevant regulatory authorities in Malaysia will be notified as required by law.
• Dunia21 will take immediate steps to contain the damage, restore systems, and prevent any further breach.

If you suspect your dunia21 account has been compromised, please contact our support team immediately via 24/7 live chat or email support@dunia21.biz so that protective measures can be taken without delay.

If you have any questions, concerns, or requests regarding this Privacy Policy or dunia21's handling of your personal data, please contact us via:

• Email: support@dunia21.biz
• Live Chat: Available 24 hours a day, 7 days a week via the dunia21 platform

Dunia21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. Any amendments will be published on dunia21.biz with the update date clearly displayed. Continued use of the platform after an amendment is published will be considered acceptance of the updated policy.