Privacy Notice
This Privacy Policy describes 918app's data management practices and your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA). By using the 918app platform, you agree to the terms set out in this document. If you do not agree, please discontinue use of the platform.
1. Types of Personal Data We Collect
918app collects your personal data through various interaction points when you use our platform. We only collect information that is genuinely necessary to provide a safe, fair, and high-quality service.
Data you provide directly:
- Full name as per official documents
- Date of birth for age verification
- Email address and mobile phone number
- Full residential address
- Identity card or passport number (for KYC process)
- Bank account details, credit/debit card numbers, or digital wallet information (Touch 'n Go eWallet, GrabPay) for transaction processing
Data collected automatically during platform use:
- IP address and general location information (city/state level)
- Device type, operating system, and web browser version
- Login history and session activity
- Game usage data including betting history and transactions
- Cookie data and device identifiers
2. Purpose of Personal Data Use
Every piece of data we collect has a clear and legitimate purpose. 918app does not use your data for purposes unrelated to the provision of platform services without obtaining your consent first.
| Purpose of Use | Legal Basis |
|---|---|
| Account registration and identity verification (KYC) | Contractual requirement |
| Deposit and withdrawal processing | Contractual requirement |
| Fraud prevention and anti-money laundering | Legal obligation |
| Customer support and complaint resolution | Legitimate interest |
| Delivery of promotions and personalised offers | Your consent |
| Product improvement and usage analytics | Legitimate interest |
| Compliance with regulatory body directives | Legal obligation |
If we intend to use your data for a new purpose not previously stated here, we will inform you and obtain the necessary consent before proceeding with that processing.
3. Data Storage & Security Measures
918app continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorized access, loss, or misuse.
- 256-bit SSL encryption: All data transmitted between your device and 918app servers is protected with industry-grade TLS/SSL encryption.
- Data encryption at rest: Sensitive data stored in our databases is encrypted using AES-256 standards.
- Layered access control: Only staff with specific authorization may access member personal data, and every access is recorded in an audit log.
- Regular security testing: Our systems undergo regular penetration testing and security audits conducted by independent third parties.
- Two-factor authentication (2FA): All internal admin accounts are protected with mandatory 2FA, and members are encouraged to enable 2FA on their own accounts.
- Licensed data centre: Data is stored in ISO 27001-certified data centers with full physical protection and redundancy.
4. Data Sharing with Third Parties
918app does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data sharing only occurs in the following limited situations:
- Payment service providers: Transaction information is shared with required payment processors (e.g. FPX, local banks, digital wallet providers) solely for processing your deposits and withdrawals.
- Gaming software providers: Non-personally identifiable game statistics are shared with our gaming platform providers for technical purposes.
- Regulatory authority: 918app will disclose data when required by Malaysian law, court order, or a directive from a legitimate regulatory authority.
- Fraud prevention agencies: Minimum necessary information may be shared with registered fraud prevention agencies to protect the platform ecosystem and all members.
- Business acquisition: If 918app is involved in a merger or acquisition, data may be transferred to the successor entity with advance notice given to you.
All third-party service providers we engage are required to comply with data protection standards equal to or higher than our own, and are bound by strict data protection agreements.
5. Cookies & Tracking Technologies
918app uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.
Types of cookies we use:
- Session cookies (required): Required to keep you logged in during an active session and to maintain account security. This cookie cannot be disabled.
- Preference cookies: Stores your personal settings such as preferred language, display settings, and game preferences.
- Analytics cookies: Helps us understand how members interact with the platform so we can continually improve the user experience.
- Security cookies: Used to detect suspicious login attempts and protect accounts from unauthorized access.
You can manage your cookie settings through your web browser. Please note, however, that disabling certain cookies may affect the functionality of the 918app platform.
6. Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. 918app is committed to helping you exercise these rights promptly and without unnecessary obstacles.
Right of Access
Request a copy of all personal data we hold about you, including how it is used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in our records.
Right to Erasure
Request deletion of your data when it is no longer needed, subject to legal obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time without providing a reason.
Right to Data Portability
Request your data in a machine-readable format for transfer to another platform.
Right to Restrict Processing
Request restriction of your data processing in certain situations, such as during a dispute.
To exercise any of the above rights, contact the 918app support team via in-platform live chat. We will process your request within 30 calendar days.
7. Protection of Children's Data
918app is a gaming platform strictly limited to individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.
If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on this platform are encouraged to contact us promptly through our customer support channels.
8. Cross-Border Data Transfers
In some situations, your personal data may be transferred to, or processed in, countries outside Malaysia. This occurs primarily when we use cloud infrastructure services or international gaming software providers.
918app ensures that any cross-border data transfer is only carried out when:
- The recipient country provides a level of data protection equivalent to Malaysia
- A valid and binding data transfer agreement exists between 918app and the receiving party
- The transfer is required or permitted under applicable Malaysian law
You can obtain more information about the protection mechanisms used for international data transfers by contacting our privacy team.
9. Data Retention Period
918app retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations.
| Data Category | Retention Period |
|---|---|
| Active account information | For the duration of active account + 5 years |
| Financial transaction records | 7 years (legal requirement) |
| KYC Documents | 5 years after account closure |
| Support communication logs | 3 years |
| Analytics cookie data | 13 months |
| Security and access logs | 12 months |
Once the retention period expires, data will be securely deleted or anonymised so it can no longer be personally associated with you.
10. Amendments to This Privacy Policy
918app reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via in-app notifications or your registered email.
The "Last Updated" date at the top of this document indicates when this policy was last reviewed. We encourage you to check this page periodically to stay informed about how we protect your information.
If you have any questions, concerns, or wish to exercise your privacy rights, the 918app support team is available via in-platform live chat. You may also refer to our FAQ page for answers to frequently asked questions about privacy.
Security Infrastructure 918app
The layers of protection we use to keep your data safe at all times
SSL 256-bit
All data in transit is encrypted using the latest SSL/TLS standards.
Mandatory 2FA
Two-factor authentication is available for all 918app member accounts.
ISO 27001
Data is stored in ISO 27001-certified data centers.
Regular Audits
Independent security testing is conducted regularly by third parties.
Why Your Privacy Is Safe with 918app
More than just words — these are the real practices we follow every day.
Data Not Sold
Your personal information is never sold or rented to advertisers or any third party for commercial gain.
Secure & Transparent KYC
Our KYC verification process is conducted through fully encrypted channels. Your documents are never stored in an unsecured format.
Full Notification Control
You have full control over the types of communications you receive from us, including the option to opt out of all marketing communications.
Legacy Data Anonymization
Data that has exceeded its retention period is anonymized or securely deleted using industry-standard methods.
Malaysia PDPA Compliance
All our data management practices fully comply with the Personal Data Protection Act 2010 (PDPA) and the guidelines of the Malaysian Personal Data Protection Commissioner.
24/7 Privacy Support
Our support team is available to assist with any privacy or data-related queries or requests at all times, including weekends and public holidays.