918kaya Privacy Policy

1. Introduction & Scope

918kaya is committed to protecting the privacy and personal data of all individuals who interact with the 918kaya Platform, including registered members, prospective members, and general visitors. This Privacy Policy applies to all personal data collected through the 918kaya website at 918kaya.co, all associated subdomains, mobile-browser experiences, and any communication channels operated by 918kaya including live chat and email support.

This Policy should be read alongside the 918kaya Terms and Conditions. Terms used but not defined in this Policy carry the meanings given to them in the Terms and Conditions.

2. Data Controller

For the purposes of this Privacy Policy, 918kaya acts as the data controller in respect of personal data collected from members and visitors of the Platform. All queries relating to data processing activities, data subject rights, or this Privacy Policy may be directed to the 918kaya Data Protection contact via email at [email protected] or through the live chat facility available within your account dashboard.

3. Data We Collect

3.1 Registration & Identity Data

When you create a 918kaya Account, we collect personal information necessary to establish and verify your identity and to comply with our Know Your Customer (KYC) and responsible gaming obligations. This includes:

• Full legal name as it appears on your identity document
• Date of birth (for age verification — players must be 21 or above)
• Malaysian identity card (MyKAD) number or passport number
• Registered email address
• Malaysian mobile phone number
• Residential address

3.2 Financial & Payment Data

To process deposits and withdrawals, 918kaya collects information relating to your chosen payment methods, including account names and identifiers associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected bank accounts (Maybank, CIMB, Public Bank, Hong Leong Connect, and others), and any other payment method used. We do not store full card numbers or bank login credentials — payment processing is handled by our regulated payment partners.

3.3 Transaction & Gaming Activity Data

918kaya maintains a complete record of all account activity, including deposit and withdrawal history, wager details (game type, stake, odds, outcome), bonus usage, and session activity timestamps. This data is retained for regulatory compliance, dispute resolution, responsible gaming monitoring, and internal audit purposes.

3.4 Technical & Usage Data

When you access the 918kaya Platform, we automatically collect technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud detection, Platform performance optimisation, and regulatory reporting.

3.5 Communications Data

If you contact 918kaya via live chat, email, or any other channel, we retain records of those communications — including chat transcripts and email correspondence — for quality assurance, dispute resolution, and staff training purposes.

4. How We Use Your Data

6. Data Sharing & Disclosure

918kaya does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

6.1 Service Providers

We engage regulated third-party service providers to support Platform operations, including payment processors, KYC verification providers, game software providers, cloud hosting infrastructure, fraud detection services, and customer support platform vendors. These providers are contractually bound to process personal data only on 918kaya's instructions and to maintain appropriate security standards.

6.2 Regulatory & Legal Disclosure

918kaya may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by law, court order, or regulatory direction. This includes disclosure under applicable anti-money laundering legislation and responsible gaming regulatory frameworks.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 918kaya's business, personal data held by 918kaya may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

7. Cookies & Tracking Technologies

The 918kaya Platform uses cookies and similar tracking technologies to deliver core Platform functionality, maintain login sessions, remember preferences, monitor security, and collect anonymised analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without disrupting core services such as login session management and payment security.
• Analytics cookies: Used to collect anonymised data on how visitors interact with the Platform, enabling us to improve performance and user experience. No personally identifiable information is transmitted via analytics cookies.
• Security cookies: Used for fraud detection, bot prevention, and login security, including device fingerprinting for new-device detection during 918kaya login sessions.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality, particularly session management and login features.

8. Data Retention

918kaya retains personal data for as long as necessary to fulfil the purposes described in this Policy, and for such additional periods as required by applicable law. In practice, this means:

• Active account data is retained for the duration of your account's existence plus a minimum of five (5) years following account closure, in accordance with AML and regulatory recordkeeping obligations.
• KYC verification documents are retained for the period specified by applicable AML regulation, typically five (5) years from the end of the relevant business relationship.
• Transaction records are retained for a minimum of five (5) years for regulatory compliance purposes.
• Customer support communications are retained for two (2) years from the date of the interaction, unless a longer period is required for an unresolved dispute.

9. Security Measures

918kaya implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 918kaya Platform
• Encrypted storage of sensitive personal and financial data at rest
• Access controls limiting internal staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits conducted by independent third-party specialists
• Continuous security monitoring and automated anomaly detection on all Platform infrastructure
• Mandatory two-step verification for internal administrative access to member account data

While 918kaya employs industry-standard security practices, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 918kaya Account and to contact support immediately if you suspect unauthorised access to your account.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by 918kaya:

• Right of access: You may request a copy of the personal data 918kaya holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly in your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our overriding legal obligations (including AML recordkeeping requirements).
• Right to restrict processing: You may request that we restrict processing of your personal data in certain circumstances.
• Right to object: You may object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the 918kaya support team via live chat from your account dashboard or by email at [email protected]. 918kaya will respond to all rights requests within 30 days.

11. Children & Minors

The 918kaya Platform is strictly intended for adults aged 21 years and above. 918kaya does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as a mandatory step in the KYC process prior to first withdrawal. If 918kaya becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended and all associated personal data will be deleted or anonymised to the extent permitted by our legal obligations.

12. Policy Amendments

918kaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to members via email to their registered address or via a prominent notice on the Platform. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the 918kaya Platform following any amendment constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 918kaya, please contact us via:

• Live Chat: Available 24/7 from your 918kaya account dashboard
• Email: [email protected]

918kaya aims to acknowledge all data protection queries within one (1) business day and to resolve them within thirty (30) calendar days of acknowledgement.