Official SBK21 Documents

Privacy Policy SBK21 — Our Commitment to Protecting Malaysian Players' Data

At SBK21, your privacy is not merely a legal requirement — it is a core value that guides every decision we make regarding player data. This policy clearly sets out what we collect, why we need it, and how we protect it. Written in plain, straightforward language, free of confusing jargon.

Last updated
1 January 2026 — Version 3.1
This Privacy Policy describes SBK21's personal data collection and management practices in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
Malaysia PDPA 2010 Compliance
256-bit SSL encryption for all data
Data is not sold to third parties
Right to access, amend & delete data
24/7 Security Monitoring
256-bit SSL
All data is transmitted using bank-grade encryption
PDPA 2010
Full compliance with the Malaysian Personal Data Protection Act
Player Rights Protected
You have the right to access, amend, and request the deletion of your data
No Data Selling
Your personal data is never sold or rented to any party

This document contains the Privacy Policy governing the collection, processing, storage, and protection of personal data by the platform SBK21. This Policy applies to all users of the SBK21 platform in Malaysia, including registered players, website visitors, and anyone who contacts our support team. By using the SBK21 platform, you agree to the data protection practices described in this document.

1

Introduction & Scope of the SBK21 Privacy Policy

SBK21 takes personal data protection extremely seriously. As an online casino platform serving Malaysian players, we understand that player trust depends not only on fair gameplay and fast withdrawals, but also on how we handle the personal information they entrust to us.

Privacy Policy SBK21 is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security best practices. We are committed to ensuring your personal data is collected lawfully, processed for clear and legitimate purposes, stored securely, and never misused in any way.

This policy applies to all personal data we collect through the SBK21 website, gaming platform, mobile app, email communications, live chat sessions, and all other communication channels we operate. If you have any questions about this policy, we welcome you to reach out to us at support@sbk21.biz before continuing to use the platform.

Note: This Privacy Policy should be read together with the SBK21 Terms & Conditions for a full understanding of your rights and responsibilities as a member of our platform.
2

Types of Personal Data Collected by SBK21

2.1 Data You Provide Directly

During the account registration process and use of the platform SBK21, we collect the following personal data that you provide directly:

  • Personal identification details: full name (as per MyKad or passport), date of birth, Malaysian IC number or passport number
  • Contact information: email address, Malaysian mobile number, and residential address
  • Financial information: the payment method you use (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks) — we do not store your full card number
  • Account information: username, encrypted password, language preferences and account settings

2.2 Automatically Collected Data

When you use the SBK21 platform, certain data is automatically collected by our systems for security and service improvement purposes:

  • Technical data: IP address, device type, operating system, browser type and version, screen resolution
  • Usage data: pages visited within the platform, games played, session duration, betting history and transactions
  • Location data: approximate location based on IP address for geographic region verification
  • Cookie data: session cookies, preference cookies, and analytics cookies (see Section 6 for more details)
Important: SBK21 does not store credit or debit card details directly on our servers. All payment processing is handled through PCI-DSS certified payment gateways.
3

Purpose of Data Collection & Processing

SBK21 collect and process your personal data solely for the following legitimate and necessary purposes:

  • Account management: create, verify, and manage your SBK21 player account, including KYC identity verification as required by law
  • Transaction processing: processing deposits via DuitNow, TNG, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your account
  • Service delivery: gives you access to all casino games on the SBK21 platform, including live baccarat, slots, and progressive jackpots
  • Customer support: responding to enquiries, resolving complaints, and providing technical support to you
  • Security & fraud prevention: detecting and preventing fraud, money laundering, and multi-account activity
  • Legal compliance: meet Malaysian legal compliance requirements, including anti-money laundering reporting obligations
  • Marketing communications: send you the latest SBK21 promotional information and bonus updates — only if you have consented to receive them, and you may unsubscribe at any time
  • Platform improvement: analyse usage patterns to improve the user experience, platform performance, and SBK21's game library
SBK21 never uses your personal data for any purpose beyond those stated above without first obtaining your additional consent.
4

Data Sharing with Third Parties

SBK21 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited circumstances in which we may need to share certain data with carefully selected third parties:

4.1 Trusted Service Providers

We share only the necessary data with the service providers we use to operate the platform, including game providers (Evolution Gaming, Pragmatic Play, and others), certified payment processors, and cloud service providers that store data to high security standards. All these providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than those specified.

4.2 Legal Requirements

SBK21 may be required to disclose personal data to the relevant Malaysian authorities when mandated by law, court order, or in connection with a legitimate criminal investigation. We will endeavour to notify you of any such disclosure unless prohibited by law from doing so.

4.3 Protection of SBK21's Rights

In circumstances where SBK21 needs to protect its rights, enforce its terms of use, or address fraud and unlawful activity, we may share relevant information with legal counsel or the appropriate authorities.

Our Commitment: In all data sharing situations, SBK21 shares only the minimum necessary information and ensures adequate data protection measures are in place.
5

SBK21 Data Security Measures

Protecting your personal data is a responsibility that SBK21 take with the utmost seriousness. We continuously invest in the latest security technologies and processes to ensure your data remains protected from unauthorised access, modification, or disclosure at all times.

5.1 Technical Security Measures

  • 256-bit SSL encryption: All communications between your device and SBK21's servers are encrypted using 256-bit SSL technology — the same standard used by leading banking institutions in Malaysia
  • Stored data encryption: Sensitive data stored on our servers, including passwords and financial information, is encrypted using robust encryption algorithms
  • Firewall and intrusion detection systems: SBK21's infrastructure is protected by multiple firewall layers and an intrusion detection system that monitors for suspicious activity 24 hours a day
  • Two-factor authentication (2FA): We offer 2FA as an option for all SBK21 accounts — a strongly recommended extra layer of security
  • Regular security audits: The SBK21 platform undergoes regular independent security audits to identify and address potential vulnerabilities

5.2 Organisational Security Measures

Beyond technical measures, SBK21 also enforces strict internal controls. Access to players' personal data is granted only to staff who require it to perform their duties, and all access is logged for audit purposes. All SBK21 staff undergo data privacy training and are bound by strict confidentiality agreements.

While we implement comprehensive security measures, no system can guarantee absolute security. You also play an important role in protecting your account — keep your password confidential and enable 2FA in your SBK21 account settings.
6

Use of Cookies & Tracking Technologies

The SBK21 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. The following are the types of cookies we use:

  • Required session cookies: These cookies are essential to the core functionality of the SBK21 platform — they enable you to log in, maintain your gaming session, and carry out transactions securely. Without them, the platform cannot function properly.
  • Preference cookies: These cookies store your preferences such as language, display settings, and favourite games so you do not have to reconfigure them each time you log in to SBK21.
  • Security cookies: Used to detect suspicious activity, verify player identity, and protect your account from unauthorised access attempts.
  • Analytics cookies: Helps us understand how players use the SBK21 platform — the most visited pages, most popular games, and general navigation patterns. This data is used to improve the platform.

You can manage your cookie settings through your web browser at any time. However, disabling required cookies may affect the core functionality of the SBK21 platform and your ability to log in and play.

7

Your Rights as a Data Subject at SBK21

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data subject have the following rights regarding personal data held by SBK21. We are committed to respecting and facilitating the exercise of these rights:

  • Right to Access: You have the right to request a copy of the personal data we hold about you. SBK21 will process such requests within 21 business days.
  • Right to Rectification: If you find that personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Some information can be updated directly through your SBK21 account panel.
  • Right to Restrict Processing: Under certain circumstances, you have the right to request that we restrict how we process your personal data — for example, while an investigation into data accuracy is ongoing.
  • Right to Object to Marketing: You may withdraw your consent to receive marketing communications from SBK21 at any time by clicking the "unsubscribe" link in any marketing email or by contacting our support team.
  • Right to Erasure: In certain circumstances, you may request that we delete your personal data. However, this right may be limited by legal obligations, such as anti-money laundering record retention requirements.

To exercise any of the rights above, contact the SBK21 privacy team by email at support@sbk21.biz with the subject line "Personal Data Rights Request". We will verify your identity before processing the request and respond within the timeframe stipulated by law.

8

Personal Data Retention Period

SBK21 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are general data retention guidelines:

  • Active account data: For the duration your account remains active on SBK21, plus the prescribed account closure period
  • Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysia's taxation and anti-money laundering legal requirements
  • KYC records and identity verification: Minimum 5 years after account closure, in line with compliance requirements
  • Customer support communication logs: Minimum 2 years for reference and dispute resolution purposes
  • Anonymised analytics and usage data: May be retained for a longer period as it can no longer be identified as an individual's personal data

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

9

Children's Data Protection

Platform SBK21 is not suitable for and is not intended for individuals under the age of 21. We do not knowingly collect or process personal data from minors or individuals below the stipulated age.

If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered on SBK21, please contact us immediately at support@sbk21.biz.

SBK21 uses age-verification and identity-check technology to help ensure only eligible individuals can access our platform. Child protection is a priority we do not compromise on.
10

Links to Third-Party Platforms

The SBK21 platform integrates services from trusted third-party game and payment providers. When you interact with these third-party components — such as an Evolution Gaming live casino table or the DuitNow payment gateway — you may also be subject to those providers' own privacy policies.

SBK21 is not responsible for the privacy practices of these third parties, although we only work with providers we have assessed to maintain high privacy and security standards. We encourage you to read the privacy policy of each relevant provider if you wish to understand how they handle your data.

All third-party providers integrated with the SBK21 platform are bound by data processing agreements ensuring they handle any shared data to a security standard equal to or higher than that of SBK21.

11

SBK21 Privacy Policy Amendments

SBK21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal developments, or operational requirements. Any material amendments will be communicated to registered members via email and/or a prominent notification on the platform at least 7 days before taking effect.

The "last updated" date at the top of this document will always reflect the latest version. We encourage you to review this page periodically. Continued use of the SBK21 platform after the effective date of any amendment constitutes your acceptance of the updated policy.

Current Version: SBK21 Privacy Policy Version 3.1 takes effect from 1 January 2026. Previous versions are no longer applicable.
12

Contact the SBK21 Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the management of your personal data on the platform SBK21, please reach us through the following channels:

  • Email: support@sbk21.biz (with the subject line "Data Privacy Inquiry")
  • Live Chat: Available 24 hours a day via the live chat button within the SBK21 platform
  • Telegram: Through SBK21's official support channels available within the platform

SBK21's data privacy team is committed to responding to all privacy-related enquiries within 3 to 5 business days. For formal data rights requests, please clearly state the type of request and include sufficient information for us to verify your identity for security purposes.

SBK21 Data Management Summary

A quick reference guide on how SBK21 manages each type of your personal data

Data Type Primary Purpose Shared with Third Parties? Retention Period
Name & Identification Details Account verification, KYC No (except as required by law) For the duration the account is active + 5 years
Phone Number & Email OTP verification, communications No For the duration the account is active
Payment Method Information DuitNow/TNG/FPX deposits etc. Certified payment processors only 7 years (tax requirements)
Transaction History Financial records, AML compliance No (except authorities) 7 years
Game History Dispute resolution, responsible gaming Game providers (anonymised) 2 years
IP Address & Device Data Security, fraud prevention No 90 days
Analytics Cookie Data Platform improvements No (data anonymised) 12 months

Your Personal Data Rights at SBK21

Under Malaysia's PDPA 2010, you hold these rights, which we fully respect

Right to Access Data

Request a copy of the personal data SBK21 holds about you. We will process your request within 21 business days following identity verification.

Right to Rectification

Correct inaccurate or incomplete information. Some details can be updated directly through your SBK21 account panel without needing to contact us.

Right to Erasure

Request deletion of your data under certain circumstances. This right may be limited by legal requirements, such as financial records that must be retained by law.

Right to Object to Marketing

You can opt out of SBK21 marketing communications at any time via the unsubscribe link in any email, or by contacting our support team.

Right to Restrict Processing

Request that we restrict the processing of your data in certain circumstances, such as while we are handling a correction request or dispute.

Right to Complain

If you are not satisfied with how SBK21 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

SBK21's Privacy Commitment to Malaysian Players

Six ways SBK21 protects the privacy and personal data of every Malaysian player

Full PDPA 2010 Compliance

SBK21 is fully compliant with Malaysia's Personal Data Protection Act 2010 in all aspects of data collection, processing, and storage. This goes beyond mere legal compliance — it is a core commitment to the Malaysian players who entrust us with their personal information.

PDPA 2010
256-bit SSL Encryption for All Data

Every bit of data transmitted between your device and SBK21's servers is protected by 256-bit SSL encryption — the same technology used by Maybank, CIMB, and Malaysia's major banks. This covers your login credentials, transaction data, and all personal communications.

256-bit SSL
No Data Sales to Advertisers

Unlike many other digital platforms, SBK21 never sells, rents, or shares players' personal data with advertisers or marketing companies. Your information belongs to you — we use it solely to deliver the services you signed up for.

No Data Selling
Your Data, Your Control

SBK21 gives you real control over your personal data. Through the SBK21 account panel, you can update your personal information, manage your marketing communication preferences, and request access to the data we hold — all quickly and without lengthy wait times.

Full Control Is Yours
Rigorously Vetted Third-Party Providers

Every third-party provider we work with — from game providers to payment processors such as DuitNow and TNG — undergoes a rigorous security assessment before being granted any access to SBK21 platform data. All are bound by robust confidentiality agreements.

Trusted Providers
Immediate Data Breach Notification

In the event of any data breach involving your personal information, SBK21 is committed to notifying you within the timeframe required by Malaysian law and taking immediate action to contain the impact of the breach. Transparency in such situations is a value we hold firmly.

Full Transparency
Contact SBK21's Data Privacy Team

For any enquiries, data rights requests, or concerns about how SBK21 handles your personal data, please contact us at support@sbk21.biz with the subject line "Data Privacy Inquiry". We will respond within 3 to 5 business days. Related documents: Terms & Conditions • Responsible Gaming • FAQ.

FAQ — SBK21 Privacy Policy

Further clarification on the most frequently asked questions about privacy and personal data

When you register an SBK21 account, we collect the basic information needed to create and verify your account — your full name as per your MyKad, email address, Malaysian phone number, and date of birth. You will also need to set a password, which is stored in encrypted form. For KYC verification required before your first withdrawal or at certain transaction thresholds, we may request a copy of your MyKad or passport. We do not require credit card information at registration — payments are made via your preferred method such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX when you wish to make a deposit.

Game providers such as Evolution Gaming, Pragmatic Play, and other providers integrated with SBK21 receive only the minimum technical data needed to deliver games to you — typically a session ID that cannot identify you as an individual without additional information from SBK21. Full personal details such as your name, email, or phone number are not shared with game providers. All providers working with SBK21 are bound by strict data confidentiality agreements and are not permitted to use any data for purposes other than delivering gaming services to you.

To request deletion of your account and personal data, contact the SBK21 support team by email at support@sbk21.biz with the subject line "Account and Data Deletion Request". Please ensure you have withdrawn all eligible funds from your account before submitting the request. SBK21 will process account closure requests within 1 to 3 business days. Please be aware that even after account closure, certain data — such as financial transaction records and KYC records — may need to be retained for a specified period in accordance with Malaysian legal requirements. For example, transaction records must be kept for a minimum of 7 years for tax compliance and anti-money laundering purposes. Such data will be stored securely and will not be used for any other purpose.

Yes, SBK21 sends marketing communications such as the latest promotions, bonus offers, and new game updates to members who consented to receive them at registration. You can easily opt out of these marketing emails in two ways: first, click the "Unsubscribe" link found at the bottom of any SBK21 marketing email; second, log in to your SBK21 account and update your communication preferences in the account settings. Unsubscribe requests are processed within 48 to 72 business hours. Please note that even after opting out of marketing emails, you will still receive important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts — these are necessary communications for the operation of your account and cannot be disabled.

In the unlikely event of a security incident or data breach involving SBK21 players' personal information, we have established incident response procedures in place. The first step is to contain the incident and assess its scope and impact. Once the assessment is complete, SBK21 will notify affected players via their registered email within the timeframe required by Malaysian law — explaining what occurred, what data may have been affected, and the steps we are taking to protect you. We will also report material incidents to the Department of Personal Data Protection Malaysia in accordance with PDPA requirements. While we implement comprehensive security measures, we believe transparency in such situations is our moral obligation to every Malaysian player who trusts SBK21.
🔒

Play at SBK21 with Complete Confidence — Your Data is Safe

Now that you know how SBK21 protects your privacy and personal data, register today, deposit via DuitNow, TNG, or FPX, and enjoy over 400 casino games with the peace of mind that your information is always safe and secure.

256-bit SSL • PDPA 2010 Compliant • No Data Selling • 24/7 Bahasa Malaysia Support

Bahasa Melayu