Privacy Policy SBK21

1 Introduction & Scope of This Policy

SBK21 is a Sports Betting and online casino platform operating under the domain sbk21.best and serving players in Malaysia. We take our responsibilities seriously as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all users of the SBK21 platform, including website visitors, registered members, active players, and former members whose accounts remain within the data retention period. It covers all your interactions with SBK21 — from your first visit to our website, through the registration process, betting and casino activity, financial transactions, and communications with our support team.

Sbk21 is committed to managing your personal data in a transparent, responsible manner that is fully aligned with data protection laws in Malaysia. We believe your trust is the foundation of our relationship as a platform and as players — and protecting your privacy is how we honour that trust.

2 Types of Personal Data We Collect

Sbk21 collects several categories of personal data depending on how you interact with our platform. The table below outlines the types of data collected and their purposes:

We do not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data unless specifically required for identity verification purposes, which will be clearly communicated to you in advance.

3 How SBK21 Collects Your Data

SBK21 collects your personal data through several different channels:

• Account Registration: When you register a SBK21 account, you provide us directly with basic information such as your name, email address, phone number, and password.
• Identity Verification (KYC): For first-time withdrawals or when certain thresholds are reached, we may request a copy of your official Malaysian identification document (MyKad or passport) for verification purposes.
• Financial Transactions: Payment method details and deposit/withdrawal history are collected automatically when you make transactions via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or FPX.
• Platform Usage: Betting activity, slots played, Live Casino sessions accessed, and game preferences are collected automatically while you use the platform.
• Tracking Technology: Cookies, pixels, and similar technologies are collected automatically when you browse the SBK21 website, for the purposes stated in the cookie section of this policy.
• Communications: When you contact sbk21 customer support via Live Chat or email, records of those communications are retained for service quality and dispute resolution purposes.
• Authorised Third Parties: In certain cases, we may receive information from identity verification service providers or payment providers to confirm the accuracy of the details you have submitted.

4 How We Use Your Personal Data

SBK21 uses collected personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, managing, and maintaining your SBK21 account, including the KYC process and age verification.
• Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via your chosen local payment method — Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or FPX/Maybank2u.
• Service Provision: Gives you access to all features on the sbk21 platform, including Sports Betting on the Malaysia Super League and EPL, live casino baccarat, slots, and e-sports.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other security threats to the platform and player community.
• Customer Support: Providing assistance, answering enquiries, resolving disputes, and handling complaints related to your account or transactions.
• Legal Compliance: To fulfil obligations under Malaysian law, including PDPA 2010 and reporting requirements to the relevant authorities.
• Platform Improvements: Analysing usage patterns (in non-individually identifiable form) to improve the user experience, introduce new games, and optimise platform performance.
• Marketing Communications: Sending information about sbk21's latest promotions, bonuses, and offers — only if you have given your consent to receive such communications. You may unsubscribe at any time.

SBK21 will not use your data for any purpose beyond those stated above without first obtaining your consent.

5 Data Sharing & Disclosure

SBK21 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, there are situations where we may need to share your data with the following parties:

• Payment Service Providers: E-wallet and banking providers such as Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, and FPX banks receive the information necessary to process your transactions. They are subject to their own privacy policies and Malaysia's financial regulations.
• Game Providers: Companies such as Pragmatic Play, PG Soft, and Habanero may receive the minimum technical data required to deliver slots and Live Casino games to you. These providers are bound by strict confidentiality agreements with SBK21.
• Identity Verification Services: For the KYC process, we may engage accredited third-party verification services to validate your identity documents. Information shared is limited strictly to what is required for verification purposes.
• Legal Authorities: SBK21 will disclose your data to Malaysian authorities (police, courts, regulatory agencies) when required to do so by law or a valid court order.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations may access certain data in specific contexts related to sbk21's business operations.

6 Data Security Measures

SBK21 implements multiple layers of technical and operational safeguards to protect the security of your personal data:

• 256-bit SSL Encryption: All communications between your browser and sbk21's servers are protected by 256-bit SSL encryption — the highest industry standard, ensuring that data in transit cannot be intercepted.
• Data-at-Rest Encryption: Sensitive data such as identity information and financial details are stored in encrypted format on our secure servers.
• Strict Access Controls: Only authorised sbk21 staff with a legitimate business need are permitted to access your personal data. All access is logged and monitored.
• Two-Factor Authentication: SBK21's internal systems storing user data require two-factor authentication for all staff access.
• Regular Security Audits: SBK21 conducts regular security audits and penetration testing to identify and address potential vulnerabilities before they can be exploited.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect suspicious activity and alert our security team.
• Data Backup: Your data is regularly backed up in a secure environment to ensure recovery is possible in the event of an unexpected system failure.

While SBK21 takes all reasonable measures to protect your data, no security system can be guaranteed to be 100% secure. We therefore encourage you to take your own precautions, such as using a strong, unique password for your SBK21 account and never sharing your login details with anyone.

7 Data Retention Period

SBK21 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable laws and regulations. The following are general data retention guidelines:

• Active Account Data: For the duration your SBK21 account remains active, plus any mandatory retention period following account closure.
• Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysia's accounting and tax legal requirements.
• KYC & Identity Verification Records: Minimum 5 years from account closure, in line with anti-money laundering (AML) compliance requirements.
• Support Communication Logs: 3 years from the date of communication, for reference and dispute resolution purposes.
• Technical Data & System Logs: Typically 90 days for standard technical logs and up to 1 year for security logs.
• Marketing Data & Communication Preferences: Until you withdraw your consent or close your account, whichever comes first.

Once the mandatory retention period has ended, SBK21 will securely delete or anonymise your data using methods that ensure it cannot be recovered.

8 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which SBK21 is committed to respecting and facilitating:

9 Cookies, Pixels & Tracking Technologies

SBK21 uses cookies and similar tracking technologies on our website to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the core functionality of the SBK21 platform, such as maintaining your login session, securing transactions, and remembering your language preferences. Disabling these cookies will affect the platform's functionality.
• Performance & Analytics Cookies: We use analytics tools to understand how players interact with the sbk21 platform — which pages are visited most, time spent, and navigation paths. This data is used in aggregate form to improve the platform.
• Functional Cookies: These cookies remember your preferences such as display settings, preferred language, and saved login details (if you selected "Remember Me") to make your experience on the platform more convenient.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of user sessions on the SBK21 platform.

You can manage cookies through your web browser settings. However, disabling all cookies may affect certain SBK21 platform features. Cookies set by SBK21 do not share data with third-party advertisers.

10 Children's Privacy

The sbk21 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If you believe we may have collected data from someone under the age of 18, please contact us immediately at support@sbk21.best. We will investigate and, if confirmed, delete the relevant data as soon as possible and close the account in question.

Parents and guardians are encouraged to monitor their children's online activity and use appropriate parental control software to prevent minors from accessing betting websites.

11 Amendments to This Privacy Policy

SBK21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, the latest legal requirements, or changes in platform operations. All amendments take effect immediately upon being published on this page with an updated "Last Updated" date.

For significant amendments that affect how we process your data, SBK21 will:

• Sending a notification to the email address registered to your account at least 14 days before the changes take effect.
• Displaying a clear notice on the SBK21 website regarding upcoming changes.
• In some cases, seeking your explicit consent again where the changes require a new legal basis for processing.

Continued use of the sbk21 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the platform and contact us to process your account closure and data deletion in accordance with your rights under the PDPA.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by sbk21, please reach out to us through the following channels:

We will acknowledge receipt of your request within 3 business days and complete it within 14 business days. For complex requests, we may require up to 30 business days and will notify you accordingly.