1. Home
  2. Privacy Policy

Official d21 Documents

Privacy Policy d21 – Personal Data Protection for Malaysian Players

D21 is fully committed to protecting the privacy and personal data of all our members. This Privacy Policy clearly outlines the types of data we collect, how it is used, who it may be shared with, and your rights as a data owner under Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: June 2026 PDPA Compliance 256-bit SSL Guaranteed User Rights
Register Free Log In
d21 Privacy Policy
Version 3.1 · Effective June 2026
Related Legislation Malaysia PDPA 2010
Data Encryption 256-bit SSL
Data Retention Malaysia Secure Server
Third-Party Sharing Not without consent
Right to Data Access Yes – upon request
Contact DPO support@d21.world
Data Retention Period 7 years (financial records)
Your data is protected and never sold to any third party
SSL
256-bit encryption
PDPA
Full Compliance
0
Sale of Data to Third Parties
24/7
Security Monitoring

Our Privacy Commitment

D21's Six Core Privacy Principles

This is the foundation of how d21 handles the personal data of all Malaysian members responsibly.

Limited & Purpose-Driven Data Collection

D21 only collects personal data that is strictly necessary to operate its services — your name, email address, Malaysian phone number, and local payment information such as Touch 'n Go eWallet and FPX. We do not collect data that is unrelated to the platform's operations.

Data Minimisation

Bank-Level Encryption & Security

All data transmitted between your device and d21's servers is encrypted using TLS 1.3 with AES-256-bit encryption — the same standard adopted by Maybank and CIMB Bank Malaysia. Stored data is further protected by additional security layers at ISO 27001-certified data centres.

AES-256-bit

No Sale of Data to Third Parties

D21 has never sold, rented or traded our members' personal data to any third party for marketing or commercial purposes, and we never will. Your data is used solely for the purposes for which you gave consent — namely the operation of the d21 services you use.

Data Not Sold

Full Compliance with Malaysia's PDPA 2010

D21 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means that all personal data belonging to Malaysian members is processed on a valid legal basis, for stated purposes, and with guaranteed protections for data subject rights.

Malaysia PDPA 2010

Members' Full Rights Over Their Own Data

As a d21 member, you have the right to access, correct, delete and object to the processing of your personal data. You may also request a copy of the data we hold about you at any time. All such requests are processed within 30 business days.

Full User Rights

Full Control Over Marketing Communications

D21 only sends marketing communications — slot promotions, baccarat bonuses, exclusive poker offers and more — to members who have given their explicit consent. You may unsubscribe from any d21 marketing communication at any time through your account settings.

Unsubscribe Options
Contents
Updated: 1 June 2026
Important Note

This Privacy Policy explains how d21 (operating under the domain d21.world) collects, uses, stores, and protects the personal data of our members. This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010. By registering an account or using the d21 platform, you agree to this Privacy Policy. Please read it carefully before registering.

1
Introduction & Scope of Privacy Policy

D21 is an online betting platform operating exclusively for the Malaysian market. We understand that your trust in us depends largely on how we handle the personal information you share when registering and using this platform.

This Privacy Policy applies to all information collected through the d21.world website, the d21 mobile app (where applicable), and any official d21 communication channels including email and Live Chat. It covers all registered members, website visitors and anyone who interacts with the d21 platform in any capacity.

If you have any questions about this Privacy Policy or how d21 handles your personal data, please contact our Data Protection Officer by email at support@d21.world.

2
Types of Personal Data We Collect

D21 collects your personal data through several means — directly when you register or interact with the platform, and automatically through your use of the platform. The following are the categories of data we collect:

Data Category Specific Examples How It Is Collected
Identity Data Full name, date of birth, MyKad/passport number Registration form & KYC
Contact Data Email address, Malaysian phone number, postal address Registration form
Financial Data Bank account details, TnG/GrabPay/Boost eWallet numbers Deposit & withdrawal process
Transaction Data Deposit (MYR), withdrawal, wagering, and winnings history Automatically during use
Technical Data IP address, device type, operating system, web browser Automatic – server logs
Usage Data Games played, session duration, navigation clicks Automatic – platform analytics
Communication Data Live Chat conversation records, customer support emails Customer support interactions
Sensitive Data

D21 does not collect sensitive data such as health information or religious beliefs unless it is directly relevant to a specific request from you. In the context of responsible gaming, we may retain information related to limits you have set yourself — this is done solely to protect your interests.

3
How d21 Uses Your Personal Data

D21 uses your personal data only for legitimate purposes that are relevant to the services you use. The primary purposes for which data is used are as follows:

  • Account management: Creating and maintaining your d21 account, verifying your identity through the KYC process, and keeping your account secure from unauthorised access.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing withdrawals of your winnings to your registered Malaysian bank account or eWallet.
  • Provision of gaming services: Enabling you to access and play all d21 games, including slots, live baccarat, poker, Sports Betting (Malaysia Super League, EPL, badminton) and e-sports.
  • Service communications: Sending important notifications relating to your account, transaction confirmations, security updates and essential service information.
  • Customer support: Handling enquiries, complaints, and assistance requests submitted to the d21 support team via Live Chat, email, or WhatsApp.
  • Legal compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, identity verification, and reporting duties prescribed by Malaysian authorities.
  • Responsible gaming: Monitoring betting patterns to identify signs of problem gambling and providing appropriate support to players who need assistance.
  • Platform improvements: Analysing usage data in aggregate (not at an individual level) to understand how players use the platform and make improvements that enhance the experience for all d21 members.
  • Marketing communications: With your consent only — sending bonus offers, slot promotional content, exclusive baccarat offers and other d21 promotions that may interest you.
4
Legal Basis for Data Processing

Under Malaysia's PDPA 2010, d21 only processes your personal data on a valid legal basis. The bases we rely on are:

  • Contractual performance: Processing necessary to fulfil our contractual obligations to you as a d21 member — including financial transaction processing and the provision of gaming services you have registered for.
  • Consent: For marketing communications and analytics cookies, d21 relies on the explicit consent you have provided. You may withdraw this consent at any time without affecting the validity of any processing carried out prior to your withdrawal.
  • Legal obligations: Processing required to comply with applicable Malaysian law, including the Anti-Money Laundering Act 2001, financial reporting requirements, and directions from relevant authorities.
  • Legitimate interest: Processing for the purposes of platform security, fraud prevention, service improvement, and customer support communications that does not require explicit consent but falls within the legitimate interests of d21 and our members.
5
Data Sharing with Third Parties

D21 does not sell or trade our members' personal data to any third party for their own commercial purposes. However, in order to provide a complete service, your personal data may be shared with the following categories of third parties under limited and controlled circumstances:

  • Payment providers: Payment gateways supporting Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are required to receive the transaction information necessary to process your deposits and withdrawals. All such providers are subject to strict data protection agreements.
  • Gaming software providers: Game providers such as Pragmatic Play, PG Soft, and live casino providers may require minimal game session data for audit compliance and game fairness verification purposes. Full identity data is not shared.
  • Technology service providers: Cloud infrastructure providers, cybersecurity services and identity verification partners that help d21 operate the platform securely and reliably. All such parties are bound by confidentiality agreements.
  • Legal authorities: d21 will disclose personal data to Malaysian authorities — including the police, financial regulators, or courts — when required to do so by law or court order. We will notify you of any such disclosure where permitted by law.
Data Sharing Guarantee

Every third party that receives data from d21 is bound by a legally enforceable data processing agreement, obligating them to protect your data to a standard equivalent to that of d21. We conduct periodic reviews of all third parties to ensure ongoing compliance.

6
d21 Data Security Measures

D21 continually invests in security infrastructure to ensure your personal data is always protected. Our technical and organisational security measures include:

  • Transit encryption: All data transmitted between your browser/app and d21's servers is encrypted using TLS 1.3 with the strongest available cipher suites — the same standard used by Malaysian online banking.
  • Stored data encryption: Sensitive personal data stored in d21's databases is encrypted using AES-256 — a standard adopted by international national security agencies.
  • Access controls: Access to members' personal data within d21's internal systems is restricted to staff who require it to perform their duties. All access is logged and monitored in real time.
  • Two-factor authentication (2FA): d21's internal systems require 2FA for all staff accessing user data, adding an extra layer of protection against unauthorised access.
  • Regular security audits: d21 undergoes independent security audits conducted by qualified third parties at least once a year to identify and address any vulnerabilities.
  • Incident response plan: d21 has a comprehensive security incident response plan. In the event of a data breach, we are committed to notifying affected members within 72 hours, in line with industry best practices.
7
Data Retention Period

D21 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following is a general guide to our retention periods:

  • Active account data: For as long as your account remains active on the d21 platform, plus any additional retention period following closure as specified below.
  • Financial and transaction records: A minimum of 7 years after a transaction occurs, in line with Malaysian financial legal requirements including the Anti-Money Laundering Act and tax reporting obligations.
  • KYC records and identity verification: 5 years after account closure or the end of the business relationship, in accordance with anti-money laundering compliance requirements.
  • Customer support communication logs: 3 years from the date of last communication, for reference and dispute resolution purposes.
  • Technical data and access logs: 12 months from the date of generation, unless required for an ongoing security investigation.
  • Marketing data (with consent): Until you withdraw your consent or request deletion, whichever comes first.

When your personal data is no longer required, it will be securely deleted or anonymised using procedures that ensure it cannot be recovered or re-identified.

8
Cookies, Analytics & Tracking Technologies

D21 uses cookies and similar tracking technologies to enhance your experience on our platform and for internal analytics purposes. The following are the types of cookies we use:

  • Essential cookies (required): These cookies are required for the basic operation of the d21 platform — including maintaining your login session, securing transactions and managing language preferences. They cannot be disabled without affecting platform functionality.
  • Analytics cookies: We use internal analytics data to understand how members use d21 — which pages are visited most, which games are most popular (slots, baccarat, poker, e-sports), and where players may be experiencing difficulties. This data is processed in aggregate and is not linked to any individual's identity.
  • Preference cookies: Cookies that remember your preferences, such as your interface language (Bahasa Melayu or English) and display settings, to ensure a more personalised experience on every visit.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the d21 platform. First-time visitors will be shown a cookie notice allowing them to select which categories of cookies they consent to.

9
Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding the personal data d21 holds about you. All requests relating to these rights may be submitted to support@d21.world and will be processed within 30 working days:

Right of Access
You have the right to request a copy of all personal data d21 holds about you. We will provide a comprehensive data report in an easy-to-read format.
Right to Rectification
If any personal data d21 holds about you is inaccurate or out of date, you have the right to request an immediate correction. Contact d21 support or update your details directly in your account settings.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for its original purpose, provided there is no legal obligation requiring us to retain it.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, and in certain circumstances, for other purposes based on d21's legitimate interests.
Right to Restriction
In certain circumstances — such as when you dispute the accuracy of your data or object to its processing — you have the right to request that d21 restrict the processing of your data while the matter is being resolved.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (such as JSON or CSV) for transfer to another service provider upon request.
How to Submit a Request

To submit any request relating to your data rights, contact the d21 Data Protection Officer by email at support@d21.world, stating the type of request and your identifying information for verification. We may need to verify your identity before processing the request to ensure the security of your data.

10
International Data Transfers

In operating the d21 platform, some of your personal data may be processed outside Malaysia — for instance, when we use cloud services or international technology providers. When this occurs, d21 ensures that protection equivalent to Malaysia's PDPA 2010 is upheld through the following mechanisms:

  • Data processing agreements that require recipients to maintain a level of protection equivalent to Malaysia's standards.
  • Only working with service providers operating in countries recognised as having adequate data protection standards.
  • Implementing additional technical safeguards such as end-to-end encryption for data transmitted across borders.

Sensitive financial data and KYC documents belonging to Malaysian players are stored with priority given to servers located in Malaysia, minimising risks associated with international data transfers.

11
Child Protection

The d21 platform is intended solely for users aged 18 and above. d21 does not knowingly collect, process, or store the personal data of individuals under the age of 18.

Should d21 discover that personal data of an underage individual has been collected without proper age verification, that data will be deleted immediately and the associated account terminated in accordance with the procedures set out in d21's Terms & Conditions.

If you have reason to believe that an individual under 18 years of age has registered on the d21 platform, please notify us immediately by email at support@d21.world so that prompt action can be taken.

12
Privacy Policy Amendments & Change Notifications

D21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the technologies we use. Each updated version will be published with a clear effective date at the top of this document.

For significant amendments — meaning changes that materially affect how we process your personal data — d21 will notify you via email to the address registered on your account, or through a prominent notice displayed within the platform, at least 14 days before the changes take effect.

Your continued use of the d21 platform after any amendment takes effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 9.

For any enquiries, concerns, or complaints regarding d21's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at support@d21.world. We are committed to taking every enquiry seriously and responding within 5 business days.

Frequently Asked Questions about d21's Privacy Policy

Answers to the most frequently asked questions from Malaysian members about privacy and data protection at d21.

No, d21 has never sold and will never sell, rent, or trade our members' personal data to any third party for their commercial purposes. Your personal data is used solely to operate the d21 services you use and to fulfil relevant legal obligations. Any sharing with third parties — such as payment providers Touch 'n Go or GrabPay — is strictly to facilitate the processing of your transactions and is governed by binding confidentiality agreements.

d21 does not store sensitive payment details such as your credit card number or eWallet password directly on our servers. All deposit and withdrawal transactions — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks) — are handled through licensed payment gateways that comply with international payment security standards. Data transmitted between the d21 platform and payment providers is fully encrypted using TLS 1.3.

Yes, you can request the deletion of your personal data. However, please note that certain categories of data cannot be deleted immediately due to legal obligations — specifically financial and transaction records, which must be retained for a minimum of 7 years under Malaysian financial law. Once the mandatory retention period has elapsed, all your data will be permanently deleted. To initiate a deletion request, contact d21 support by email at support@d21.world.

When you close your d21 account, your access to the platform will be terminated immediately. Your personal data will be retained for the periods required by law — financial records for 7 years, KYC records for 5 years and communication logs for 3 years. After these periods, all data will be permanently deleted or anonymised. Data not subject to statutory retention obligations will be deleted within 90 days of account closure.

d21 uses cookies for three main purposes: essential cookies to keep the platform functioning correctly (including login sessions), preference cookies to store your settings such as language, and internal analytics cookies to understand platform usage in aggregate for improvement purposes. We do not use third-party advertising cookies. You can manage cookies through your browser settings, though disabling essential cookies may affect platform functionality.

There are two easy ways to stop receiving marketing communications from d21. First, click the "Unsubscribe" link at the bottom of any promotional email we send — this will process your request immediately. Second, log in to your d21 account, go to Account Settings, select "Communication Preferences", and deselect the communication categories you no longer wish to receive. Changes take effect within 48 hours. Please note that unsubscribing from marketing will not affect your receipt of essential service emails such as transaction confirmations and security notifications.

Further Details

Data Privacy at d21 – What It Means for Malaysian Players

In today's digital age, data privacy is an increasingly important concern for all users of online services — including players on betting platforms like d21. When you register an account on any online platform, you are entrusting them with your personal information. At d21, we do not take that trust lightly.

Malaysia has comprehensive data protection legislation — the Personal Data Protection Act (PDPA) 2010 — which grants Malaysian users specific rights over their personal data. d21 does not treat PDPA compliance as a mere legal obligation; we believe that strong data protection is the foundation of the trust you place in us as your preferred betting platform.

When you register with d21, you provide details such as your name, email address, and Malaysian phone number — the minimum information needed to create a functioning account. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), that transaction information is processed by a licensed and regulated payment gateway. d21 does not store your eWallet or bank account credentials directly — all of that is handled by payment providers who specialise in financial security.

The KYC (Know Your Customer) process may seem like a hassle to some new players, but it is genuinely there to protect you. KYC ensures that only you — and not someone impersonating you — can withdraw funds from your d21 account. It also safeguards the platform's ecosystem from being misused for fraudulent activity or money laundering. At d21, the KYC process is designed to be as fast and straightforward as possible — typically completed within 24 working hours with just a copy of your MyKad or passport.

One issue that often concerns players is the use of their data for marketing purposes. At d21, we only send marketing communications — slots bonus offers, exclusive baccarat promotions, poker tournament information, or Malaysia Super League Sports Betting offers — to members who have given their explicit consent to receive them. Every marketing communication we send includes a working unsubscribe link, so you can withdraw that consent easily at any time.

On the technical security front, d21 continually invests in infrastructure that safeguards our members' data. 256-bit SSL encryption protects all data in transit, AES-256 encryption secures stored data, strict internal access controls ensure only authorised personnel can view user data, and independent security audits are conducted on a regular basis. This goes beyond mere legal compliance — it is an investment in the trust you place in d21.

As a d21 member, you have robust rights under Malaysia's PDPA 2010. You may request a copy of the data we hold about you, request corrections if there are inaccuracies, request deletion of data that is no longer required, and object to the use of your data for specific purposes. All these rights can be exercised by contacting d21's Data Protection Officer by email — and we are committed to responding within 30 working days for every valid request.

Your trust is d21's most valuable asset. We understand that without your confidence in how we handle your personal data, no exciting slots game or engaging baccarat table will ever make you feel truly comfortable on this platform. That is why this Privacy Policy is written in plain, accessible language, made publicly available, and updated regularly to reflect current best practices. If you have any questions or concerns about your data privacy at d21, our team is always here to help.

Your Data is Safe with d21

Ready to Play with Peace of Mind with d21?

With your privacy protected under Malaysia's PDPA, 256-bit SSL encryption, and our commitment to never selling your data, you can play at d21 with complete peace of mind. Register free today and enjoy over 1,200 games with an exclusive welcome bonus.

Register Free Now Log In
SSL 256-bit data protection Full Malaysia PDPA compliance Data is never sold to any party Full user rights guaranteed
D21 Privacy Policy

This document is the current version of d21's Privacy Policy, effective 1 June 2026. d21 takes the protection of all members' personal information seriously. Data you provide during registration and use of the platform is used solely for account verification, transaction processing and service communications. We do not sell or disclose your information to any third party without your consent, except as required by Malaysian law.

All data is encrypted with 256-bit SSL technology. If you have any questions or concerns about this Privacy Policy, contact us at support@d21.world. Please also read d21 Terms & Conditions for full details on platform usage.

Bahasa Melayu