Privacy Policy — lk21dunia

1 Introduction

lk21dunia ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who access or use our website at https://lk21dunia.cam and the services offered therein ("Services"). This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, share, and protect personal data relating to our registered players, website visitors, and any other individuals whose personal data comes into our possession in the course of operating the Platform.

This Policy applies to all personal data collected by lk21dunia through any channel, including but not limited to: account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

By registering an account on lk21dunia, using any of our Services, or continuing to browse our website, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must refrain from using the Platform and must not register or maintain an account.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, identification numbers, location data, online identifiers, and factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means lk21dunia, the entity that determines the purposes and means of processing personal data.
• "Data Subject" means the identifiable natural person to whom personal data relates — in the context of this Platform, primarily registered players and website visitors.
• "Consent" means freely given, specific, informed, and unambiguous indication of the data subject's wishes, expressed by a clear affirmative action, signifying agreement to the processing of their personal data for specific purposes.
• "Third Party" means any natural or legal person other than lk21dunia, its personnel, and the data subject, who, under the direct authority of lk21dunia, is authorised to process personal data.
• "KYC" means Know Your Customer — the regulatory identity verification process applicable to lk21dunia under its international gaming licensing obligations.

3 Data Controller

lk21dunia acts as the Data Controller in respect of personal data collected through the Platform. We determine the purposes for which, and the manner in which, personal data is processed. Our processing activities are conducted in accordance with the requirements of our international gaming licence jurisdiction and applicable international data protection standards.

For all privacy-related enquiries, data access requests, and complaints, our designated Data Protection contact can be reached at the email address specified in Section 17 (Contact Us) of this Policy.

4 Personal Data We Collect

4.1 Identity and Contact Information

When you register an account with lk21dunia, we collect your full legal name, date of birth, gender, national identification number (Malaysian IC / MyKad number or passport number for non-Malaysian residents), email address, Malaysian mobile phone number, and residential address (including postcode, city, and state — for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam as applicable).

4.2 Identity Verification (KYC) Documents

To comply with our anti-money-laundering (AML) obligations and age verification requirements (21+), we collect copies of: a valid government-issued photo identification document (MyKad, passport, or equivalent); a proof of residential address document dated within three months (bank statement, utility bill); and, where applicable, a screenshot or verification reference of the payment method used for deposits (e.g., Touch 'n Go eWallet, Boost, Maybank account statement). These documents are processed solely for compliance purposes.

4.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, and gaming transactions on your Account, including amounts (in MYR), timestamps, payment method references (partial identifiers only — we do not store full card numbers or full bank account numbers), and transaction outcomes. This data is necessary for account management, dispute resolution, and regulatory compliance.

4.4 Technical and Device Data

When you access the Platform, we automatically collect certain technical information including: IP address, device type (mobile, desktop, tablet), operating system and version, browser type and version, referring URL, pages visited, session duration, and in-session clickstream data. This data is collected through standard server logs and first-party cookies.

4.5 Gameplay and Behavioural Data

We record your betting and gaming activity on the Platform, including sports markets wagered on (e.g., Liga Super Malaysia, EPL, UFC), casino games played, bet amounts, game outcomes, bonus usage, and session patterns. This data is used for account management, responsible gambling monitoring, and improving our product offering.

4.6 Communications Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of those communications (including the content of messages, support ticket logs, and resolution outcomes) for quality assurance, dispute resolution, and staff training purposes.

5 How We Collect Personal Data

lk21dunia collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or complete any other form on the Platform.
• Automatically: Through server logs, first-party cookies, and session tracking technologies when you browse or use the Platform.
• From payment processors: When you initiate a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or cryptocurrency networks, our payment processing partners share transaction confirmation data with us.
• From identity verification services: Where we use third-party identity verification services to validate KYC documents, those services may return verification scores or flags that are stored against your Account record.
• From fraud prevention and security services: Technical data used to detect suspicious login activity, device fingerprinting anomalies, or potential fraudulent transactions may be received from our security service providers.

6 Legal Bases for Data Processing

lk21dunia relies on the following legal bases for processing personal data:

• Performance of a contract: Processing that is necessary for account registration, account management, executing bets, and processing deposits and withdrawals.
• Legal obligation: Processing required to comply with KYC, AML, and age verification obligations under our international gaming licence and applicable laws.
• Legitimate interests: Processing for fraud prevention, platform security, improving our services, and preventing prohibited activities — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where we send marketing communications, promotional offers, or bonuses via email or other channels, we do so only on the basis of your explicit prior consent. You may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in marketing emails.

7 How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Creating and managing your lk21dunia Account, including identity verification and age confirmation (21+).
• Processing deposits and withdrawals via Malaysian payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency networks).
• Providing and improving the Services, including sports betting, live casino, and slot products.
• Complying with anti-money-laundering obligations and regulatory requirements under our international gaming licence.
• Detecting, preventing, and investigating fraud, cheating, bonus abuse, and other prohibited activities.
• Administering bonus programmes, promotions, and loyalty rewards.
• Monitoring responsible gambling patterns and initiating responsible gambling interventions where appropriate.
• Resolving Account disputes, processing complaints, and maintaining customer support records.
• Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) — these are non-promotional and are sent irrespective of marketing preferences.
• Sending promotional communications and bonus offers, strictly only with your prior consent and in accordance with your stated marketing preferences.
• Conducting internal analytics and platform improvement activities using aggregated, anonymised data.

8 Data Sharing & Disclosure

lk21dunia does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: Necessary transaction data is shared with our Malaysian payment partners (including DuitNow operators, FPX, and e-wallet providers) to process deposits and withdrawals. These partners process data only as instructed by us and for payment purposes.
• KYC and identity verification providers: Identity document data may be shared with third-party verification service providers for the sole purpose of completing KYC checks. These providers are contractually bound to process data only for verification and are prohibited from using it for any other purpose.
• Fraud prevention and security services: Technical and transactional data may be shared with fraud detection service providers to protect the integrity of the Platform and prevent financial crime.
• Game content providers: Where required for live casino or slot game functionality, limited gameplay data may be shared with our licensed game studio partners for purposes of game operation and dispute resolution.
• Legal and regulatory authorities: We will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by a valid legal obligation, court order, or regulatory requirement. We will notify affected users of such disclosures to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of lk21dunia's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. lk21dunia uses first-party cookies to maintain session state, remember your login, enable secure authentication, and collect anonymised analytics data about how our platform is used. We do not use third-party advertising cookies or cross-site tracking technologies.

9.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impairing your use of the Platform.
• Functional Cookies: Remember your preferences (such as language settings and notification preferences) to improve your experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with the Platform (pages visited, session duration, feature usage) to help us improve the product. This data cannot identify you personally.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10 Data Retention

lk21dunia retains personal data only for as long as is necessary to fulfil the purposes set out in this Policy, and as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a period of five (5) years following Account closure, in compliance with AML and gaming licence record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following Account closure or the last transaction, as required by international AML standards.
• Financial and transaction records: Retained for a minimum of five (5) years following each transaction, for accounting, tax, and regulatory compliance purposes.
• Technical and session logs: Retained for up to twelve (12) months, except where a longer period is required for ongoing fraud investigations or legal proceedings.
• Support communications: Retained for up to three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your Account and for one (1) year following consent withdrawal or Account closure, as evidence of compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identified individual.

11 Data Security

lk21dunia implements a multi-layered information security programme to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data fields stored at rest.
• Strict internal access controls: only authorised personnel with a documented operational need may access identifiable player data.
• Regular vulnerability assessments and penetration testing of our Platform infrastructure.
• Two-factor authentication (2FA) available and strongly recommended for all player accounts.
• Automated intrusion detection and anomaly monitoring systems operating around the clock.

Despite our best efforts, no method of transmission over the internet or method of electronic storage is completely secure. lk21dunia cannot guarantee the absolute security of your data; however, we will notify affected users and relevant authorities in the event of a material data breach in accordance with our legal obligations.

12 International Data Transfers

lk21dunia operates under an international gaming licence and our data processing infrastructure may involve servers and service providers located outside Malaysia. When personal data is transferred to or processed in jurisdictions outside Malaysia, we take appropriate measures to ensure that such transfers comply with applicable data protection standards, including through the use of contractual safeguards (such as data processing agreements incorporating standard contractual clauses) with all international data processors.

We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate additional safeguards. By using the Platform, you acknowledge and agree to the transfer of your personal data to our servers and service providers in accordance with this Policy.

13 Your Data Rights

As a data subject, you hold the following rights in respect of personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 17.

We will respond to all verifiable rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days, with prior notification. We will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.

14 Children and Minors

The lk21dunia Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain any personal data from individuals under the age of 21. Our registration process includes date-of-birth collection and KYC identity verification specifically to prevent underage access.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated Account, delete all related personal data, and refund any deposits made, subject to our standard verification procedures. Parents and guardians are encouraged to use parental control software to prevent underage access to gambling websites including lk21dunia.

15 Third-Party Links

The lk21dunia Platform does not include links to third-party websites. In the event that any third-party links are present on the Platform (for example, within game content provided by external studios), lk21dunia is not responsible for the privacy practices or content of those third-party sites. We recommend that you review the privacy policy of any third-party site you visit independently of lk21dunia.

16 Amendments to This Policy

lk21dunia reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or service features. Where changes are material, we will notify registered users by email or through an in-Platform notification at least 7 days before the updated Policy takes effect.

The "Last Reviewed" date at the top of this Policy will be updated with each revision. Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Policy. If you do not agree to a revised Policy, you should close your Account prior to the effective date of the changes.

17 Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about how lk21dunia processes your personal data, please contact our Data Protection team through the following channel:

For responsible gambling concerns, self-exclusion requests, or deposit limit changes, please visit our Responsible Gambling page or contact support directly. Responsible gambling requests are handled with priority and complete confidentiality.