Privacy Policy for 918k

Section 01

Introduction

This Privacy Policy ("Policy") describes how 918k ("918k", "we", "us", "our"), the operator of the online casino and sports betting platform located at https://918k.cam, collects, processes, stores, shares, and protects the personal data of its registered players and website visitors ("you", "your", "Data Subject").

918k is committed to handling personal data responsibly and in accordance with applicable data protection legislation. By registering an account, making a deposit, or otherwise using the 918k platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected through the 918k website, mobile applications, customer support channels, and any other touchpoints through which you interact with the 918k brand. It applies to players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions where 918k operates.

Section 02

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, identification documents, device identifiers, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — 918k, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of 918k under written instructions.
• "KYC" — Know Your Customer; the identity and document verification process mandated for all player withdrawals.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Sensitive Data" — a subset of personal data requiring heightened protection, including government-issued identification numbers and financial account credentials.

Section 03

Data We Collect

918k collects personal data proportionate to the services provided. The categories of data we collect and their primary purposes are set out in the table below:

Section 04

How We Collect Your Data

4.1 Directly from You

The majority of personal data we hold is provided directly by you in the course of using the 918k platform:

• Completing the account registration form (name, email, phone number, date of birth).
• Submitting KYC documents (copy of Malaysian IC, MyKad, or passport; proof of address).
• Adding or verifying payment methods (bank account details, e-wallet information).
• Contacting our customer support team via live chat or email.
• Participating in promotions, tournaments, or surveys.

4.2 Automatically via Technology

When you visit or use the 918k platform, certain technical and behavioural data is collected automatically through cookies, log files, and analytics tools:

• IP address and geolocation data (country/region level).
• Device identifiers and browser fingerprint data.
• Session duration, page navigation paths, and feature interaction data.
• Game sessions initiated, wagers placed, and outcomes recorded.

4.3 From Third Parties

In limited circumstances, 918k may receive personal data about you from trusted third-party sources to supplement what you have provided directly:

• Identity verification and KYC service providers who validate your identity documents.
• Payment processors and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) who confirm transaction details.
• Fraud detection and anti-money laundering screening services.
• Affiliate partners who referred your registration (limited to referral attribution data only).

Section 05

Purpose of Data Processing

918k processes your personal data for the following specific purposes:

1. Account Management — creating, maintaining, and administering your registered account on the 918k platform.
2. Identity & Age Verification — confirming that you are who you claim to be and that you meet the minimum age requirement of 21 years.
3. Payment Processing — facilitating deposits and withdrawals through approved Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank.
4. Legal & Regulatory Compliance — meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulations.
5. Fraud Prevention & Security — detecting, investigating, and preventing fraudulent, abusive, or unlawful activity on the platform.
6. Responsible Gambling Monitoring — identifying behavioural patterns that may indicate problem gambling and offering appropriate intervention, deposit limits, or self-exclusion options.
7. Customer Support — handling enquiries, complaints, and disputes in a timely and effective manner.
8. Platform Improvement — analysing usage data to improve platform performance, game offerings, and the overall player experience.
9. Direct Marketing — sending promotional communications about bonuses, offers, and platform updates, where you have given explicit consent or where permitted under applicable law.

Section 06

Legal Basis for Processing

918k processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity — processing required to perform our obligations under the Terms and Conditions you accepted upon registration (e.g., processing your deposits and withdrawals).
• Legal Obligation — processing required to comply with applicable AML, KYC, responsible gambling, and data protection laws.
• Legitimate Interests — processing carried out for our legitimate business interests, including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent — processing based on your freely given and specific consent, such as the receipt of direct marketing communications. You may withdraw consent at any time by updating your account preferences or contacting support.

Section 07

Data Sharing & Disclosure

7.1 Trusted Service Providers

918k may share your personal data with carefully selected third-party service providers who assist us in operating the platform. These providers act as Data Processors under written data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service. Categories of such providers include:

• KYC and identity verification providers.
• Payment processing partners and Malaysian banking infrastructure providers.
• Fraud detection and AML screening vendors.
• Customer support and live chat platform operators.
• Cloud hosting and infrastructure providers on whose servers platform data is stored.
• Analytics service providers who process anonymised or aggregated usage data.

7.2 Legal and Regulatory Disclosure

918k may disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive — or where disclosure is necessary to protect the rights, property, or safety of 918k, its players, or third parties.

7.3 No Sale of Personal Data

Section 08

Data Retention

918k retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

• Active account data: retained for the full duration of your account registration plus a minimum of five (5) years following account closure.
• KYC and identity documents: retained for a minimum of five (5) years following the last transaction on the account, in accordance with AML regulatory requirements.
• Transaction records: retained for a minimum of seven (7) years to satisfy financial record-keeping obligations.
• Marketing preferences: retained until you withdraw consent or request erasure, whichever is earlier.
• Support communications: retained for a minimum of three (3) years from the date of the interaction for dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 918k's internal data deletion procedures.

Section 09

Data Security

918k implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive personal data stored on 918k infrastructure.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited strictly to what is required for their function.
• Two-factor authentication (2FA) available for all player accounts and mandated for internal staff systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Security incident response procedures, including mandatory breach notification protocols.

Section 10

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. 918k uses cookies and similar technologies (such as local storage, session tokens, and tracking pixels) to operate the platform effectively and improve your experience.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality — including maintaining your login session, processing deposits, and ensuring security. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how visitors use the platform (e.g., most visited pages, error reports) to help us improve performance.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-used payment method.
• Analytics Cookies: Used to understand player behaviour patterns in aggregate, supporting platform development and responsible gambling monitoring.

10.3 Managing Cookies

You may control non-essential cookies through your browser's privacy settings. Please note that disabling certain cookies may affect the functionality of the 918k platform, including the ability to log in or process transactions. Strictly necessary cookies cannot be disabled without affecting core platform operations.

Section 11

Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by 918k:

1. Right of Access — you may request a copy of the personal data 918k holds about you. We will respond within 30 days of a verified request.
2. Right to Rectification — you may request correction of inaccurate or incomplete personal data. Account details can be updated directly via your account settings for minor changes; significant updates require identity verification.
3. Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent. Note that certain data must be retained for legal compliance and cannot be erased on request.
4. Right to Restrict Processing — you may request that 918k limit the processing of your personal data in certain circumstances, such as while a dispute is being investigated.
5. Right to Data Portability — where processing is based on consent or contractual necessity, you may request your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object — you may object to processing based on legitimate interests, including direct marketing. Objections to marketing can be actioned immediately via your account settings.
7. Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 918k support team via live chat or at [email protected] (plain text — not a clickable link). We may need to verify your identity before processing your request.

Section 12

Minors & Age Restriction

The 918k platform is intended exclusively for adults aged 21 years and above. 918k does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts prior to enabling withdrawal functionality.

If 918k becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, the data will be securely deleted (subject to any applicable legal retention obligations), and any funds held in the account will be handled in accordance with applicable law.

Section 13

International Data Transfers

In the course of operating the 918k platform, your personal data may be transferred to and processed in countries outside of Malaysia, including where our cloud infrastructure, KYC service providers, or other data processors are located.

Where such transfers occur, 918k takes appropriate steps to ensure that your personal data is protected to a standard at least equivalent to that required under applicable Malaysian data protection law. This may include implementing data processing agreements with standard contractual clauses, or relying on adequacy findings by relevant regulatory bodies.

Players who have questions about the specific safeguards applicable to cross-border transfers of their data are welcome to contact the 918k support team for further information.

Section 14

Policy Amendments

918k reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The "Last updated" date at the top of this page will be revised to reflect the date of each update.

Where amendments are material — meaning they significantly affect how we use your personal data — we will notify registered players by email and/or via a prominent notice on the platform prior to the change taking effect. Continued use of the 918k platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy.

Section 15

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or 918k's data processing practices, or if you wish to exercise any of your data rights, please contact us through the following channels: