Privacy Policy — Ganteng21

1. Introduction

This Privacy Policy (hereinafter referred to as "Policy") is issued by Ganteng21 (hereinafter "we", "us", "our", or "Ganteng21") and applies to all personal data collected from individuals (hereinafter "you", "your", or "Data Subject") who access or use the Ganteng21 online gaming platform available at ganteng21.cam (the "Platform"), including all pages, services, features, and functionality made available thereon.

Ganteng21 is committed to protecting the privacy and security of every player's personal information. This Policy explains in plain, structured terms what personal data we collect, on what legal basis we process it, how long we retain it, who we may share it with, and the rights available to you as a Data Subject.

By registering an account, accessing the Platform, or otherwise engaging with Ganteng21 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent, you should refrain from using the Platform and contact us to request account closure and data deletion.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to that person's identity.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For all processing described in this Policy, Ganteng21 acts as the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of Ganteng21 strictly under contractual instruction.
• "KYC Data" — identity verification documentation, including Malaysian IC (MyKad) images, selfies, and supporting identity records collected as part of the Know Your Customer compliance process.
• "Cookies" — small text files stored on your device by the Platform to enable functionality, session management, and analytical tracking.
• "Consent" — freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a stated purpose.

3. Data Controller

Ganteng21 is the Data Controller responsible for your Personal Data collected and processed through the Platform at ganteng21.cam. As Data Controller, Ganteng21 determines the purposes for which your data is collected, the means by which it is processed, and the appropriate technical and organisational measures to protect it.

For all data-related enquiries, requests, or complaints, you may contact Ganteng21 directly using the contact details set out in Section 18 of this Policy.

4. Personal Data We Collect

Ganteng21 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and in limited circumstances from third-party sources such as payment processors and identity verification services.

4.1 Data Provided Directly by You

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality	Registration & KYC
Contact Data	Email address, Malaysian mobile number	Registration
Address Data	Residential address, postcode, state	Registration & KYC
KYC Documents	MyKad image (front & back), selfie with ID	Identity verification
Financial Data	Payment method details, transaction history, wallet IDs	Deposits & withdrawals
Account Credentials	Username, hashed password	Registration
Support Communications	Live chat transcripts, email correspondence	Customer support interactions

4.2 Data Collected Automatically

When you access and use the Platform, Ganteng21 automatically collects certain technical and behavioural data:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser information
• Session data including login timestamps and session duration
• Pages visited, game titles played, bet amounts, and in-platform navigation patterns
• Referring URLs (the website or link that directed you to the Platform)
• Cookie and tracking identifiers (see Section 11 for full Cookie Policy)

5. Purposes of Data Processing

Ganteng21 processes your Personal Data for the following specific, legitimate purposes:

• Account Management: To create, maintain, and administer your player account, including login authentication, account settings, and balance management in Malaysian Ringgit (MYR).
• Identity Verification (KYC): To verify your identity in compliance with applicable anti-money laundering (AML) and responsible gambling obligations before processing withdrawal requests.
• Transaction Processing: To process deposits and withdrawals via approved Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), USDT TRC20, and BTC.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, complaints, and support requests submitted via live chat or email.
• Legal & Regulatory Compliance: To fulfil obligations imposed by applicable laws and regulatory requirements, including the retention of financial transaction records.
• Responsible Gambling: To monitor player behaviour patterns for indicators of problem gambling and to enforce deposit limits, cooling-off periods, and self-exclusion arrangements.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform functionality, game library, and user experience.
• Marketing Communications: To send promotional emails, bonus notifications, and platform updates to players who have opted in to receive such communications (see Section 16).

6. Legal Basis for Processing

Ganteng21 processes Personal Data under the following legal bases:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions agreement between you and Ganteng21 — including account creation, deposit processing, withdrawal handling, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, financial record-keeping requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out in Ganteng21's legitimate interests, including fraud detection, platform security, abuse prevention, and general Platform improvement — provided these interests do not override your fundamental rights.
• Consent: Processing based on your explicit, freely given consent — principally for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third-Party Disclosure

Ganteng21 does not sell, rent, or trade your Personal Data to any third party for their own commercial or marketing purposes. We may share your data with third parties only in the following strictly limited circumstances:

• Payment Processors: Payment service providers and financial institutions facilitating deposits and withdrawals (e.g., FPX network operators, e-wallet platforms) receive transaction data necessary to complete your requested payment. They act as Data Processors under contractual data processing agreements.
• Identity Verification Services: Third-party KYC and AML screening providers may process your identity documents and personal details for the purpose of identity verification. These providers are bound by strict confidentiality and data protection obligations.
• IT Infrastructure & Hosting Providers: Cloud hosting, server management, and technical infrastructure partners may have access to encrypted data as part of their service delivery. All such providers operate under data processing agreements with Ganteng21.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request, Ganteng21 may disclose Personal Data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or serious platform abuse, Ganteng21 may share relevant data with industry fraud-prevention bodies or law enforcement agencies.

8. International Data Transfers

As an internationally operating online gaming platform, certain Personal Data processed by Ganteng21 may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, Ganteng21 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to applicable data protection laws, including contractual clauses requiring recipient organisations to process data with equivalent protections.

In all cases, transfers are made only to countries or organisations that provide adequate data protection, or are governed by approved contractual frameworks ensuring equivalent protections for your rights as a Data Subject.

9. Data Retention

Ganteng21 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status plus a post-closure period required for legal compliance (typically five to seven years for financial transaction records).
• KYC Documents: Retained for a minimum of five years from the date of submission, in accordance with applicable AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for up to three years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of prior consent status.
• Anonymised Analytical Data: May be retained indefinitely as it does not constitute Personal Data following anonymisation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard data destruction methods.

10. Security Measures

Ganteng21 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including KYC documents and payment method details.
• Role-based access controls limiting access to Personal Data to authorised personnel only.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Two-factor authentication options for player account access.
• Secure server environments with physical and logical access controls.
• Staff training on data protection obligations and privacy-by-design principles.

11. Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you access the Platform. They allow Ganteng21 to recognise your browser, maintain your session, store your preferences, and collect anonymised analytical data about Platform usage.

11.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security verification. These cookies cannot be disabled without impacting Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players use the Platform, including pages visited and game interactions, to help us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently played games to provide a personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of campaigns. These are only activated where you have provided explicit consent.

11.3 Cookie Management

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, or receive notification when cookies are being set. Disabling certain cookies may impact Platform functionality.

12. Your Data Subject Rights

As a Data Subject whose Personal Data is processed by Ganteng21, you hold the following rights. To exercise any of these rights, please contact us using the details in Section 18:

Ganteng21 will respond to all Data Subject rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days with prior notification. All requests must be verifiable — we will ask you to confirm your identity before actioning any data rights request.

13. Minors & Age Policy

The Ganteng21 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or use the Platform in any capacity.

If Ganteng21 discovers or is notified that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete all related Personal Data, and return any deposited funds in accordance with our standard procedures. Parents and guardians who believe their child may have accessed the Platform are encouraged to contact us immediately via live chat or email.

14. KYC & Identity Verification Data

KYC verification is a mandatory process at Ganteng21, required before processing any player withdrawal. As part of this process, we collect and process government-issued identity documents — primarily the Malaysian IC (MyKad) — along with selfie verification images in certain circumstances.

KYC documents are processed exclusively for identity verification and AML compliance purposes. They are stored securely using encryption and are not used for any marketing, profiling, or commercial data activity. Access to KYC documents is strictly limited to authorised compliance personnel and regulated third-party KYC service providers operating under contractual data processing agreements.

KYC records are retained for the minimum period required by applicable AML and regulatory frameworks — typically a minimum of five years from submission date.

15. Payment Data

Financial transaction data processed through Ganteng21 — including deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, USDT TRC20, and BTC — is handled through secure, PCI-compliant payment processing channels. Ganteng21 stores transaction reference data and wallet/account identifiers necessary for transaction reconciliation, dispute resolution, and regulatory reporting.

Full payment card or bank account numbers are not stored on Ganteng21's servers. Sensitive payment credentials are tokenised or processed entirely within the payment provider's secure environment.

16. Marketing Communications

Ganteng21 may send you promotional emails, bonus notifications, and platform updates where you have provided explicit consent at registration or through your account settings. You may withdraw consent to marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent to you.
• Updating your communication preferences in your account settings.
• Contacting our support team via live chat or email with a direct opt-out request.

Withdrawal of marketing consent will not affect your ability to continue using the Platform or receiving essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent irrespective of marketing preferences.

17. Policy Amendments

Ganteng21 reserves the right to update this Privacy Policy at any time to reflect changes in our processing activities, applicable law, or regulatory requirements. Where amendments are material — meaning they affect how your Personal Data is used in a way that may impact your rights — we will provide at least fourteen (14) days' advance notice via the email address registered to your account and/or a prominent notice on the Platform homepage.

Minor, non-material changes (such as formatting corrections or clarifications that do not alter the substance of the Policy) may be made without prior notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how we protect your information.

18. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your Data Subject rights, please contact the Ganteng21 Data Privacy team through the following channels:

• Live Chat: Available 24/7 via the live chat widget on the Platform. Please state "Privacy Request" at the start of your message to ensure prompt routing to the appropriate team.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line. This email address is displayed as plain text and is not a clickable link.

All Privacy Policy enquiries will be acknowledged within 72 hours and resolved within 30 calendar days, or within an extended period of up to 90 days for complex requests, with prior notification of any extension.

For related policy documents, please refer to our Terms & Conditions and Responsible Gambling pages.