Privacy Policy

This Privacy Policy ("Policy") is issued by 918ks ("the Platform", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at 918ks.cam. This Policy describes how 918ks collects, processes, stores, uses, and protects the personal information of users ("you", "your", or "the User") who register accounts, access our services, or interact with our Platform in any capacity.

918ks serves players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. We recognise that privacy is a fundamental right and that users who entrust us with their personal data are entitled to know precisely how that data is handled.

By registering an account or using any service on the 918ks Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not create an account or use our services.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• Personal Data: Any information that identifies or can be used to identify a natural person, either directly or indirectly. This includes your name, email address, phone number, Malaysian IC number (MyKad), IP address, and device identifiers.
• Processing: Any operation performed on personal data, including but not limited to collection, recording, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• Data Controller: 918ks, as the entity that determines the purposes and means of processing your personal data.
• Data Processor: Any third party engaged by 918ks to process personal data on our behalf under a formal data processing agreement.
• User / Data Subject: Any natural person whose personal data is processed by 918ks — primarily registered account holders and visitors to the Platform.
• Cookies: Small text files stored on your device by a web browser when you visit a website. 918ks uses cookies and similar technologies for session management and analytics.
• KYC: Know Your Customer — the identity verification process required under applicable anti-money laundering and responsible gambling regulations.
• Sensitive Personal Data: A subset of personal data including government-issued identification numbers, financial account details, and biometric data — afforded heightened protection under this Policy.

918ks collects personal data through a number of channels, including direct submission by the User, automated technical collection, and — where applicable — from third-party verification providers. The categories of personal data we collect are as follows:

We collect only the personal data that is necessary for the specific purpose for which it is collected. We do not collect data that is excessive, irrelevant, or unnecessary for the operation of our Platform or compliance with our legal obligations.

918ks processes your personal data for the following specific purposes. We do not process your data for any purpose that is incompatible with those listed below:

• Account Creation and Management: To register and administer your 918ks account, verify your identity, and maintain accurate account records.
• Service Delivery: To enable access to and use of all gaming, sports betting, live casino, lottery, and arcade services available on the Platform.
• Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) through supported payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency wallets.
• Identity Verification (KYC): To comply with anti-money laundering regulations, responsible gambling requirements, and fraud prevention obligations by verifying your identity and the source of your funds.
• Responsible Gambling Monitoring: To monitor betting patterns, detect signs of potential problem gambling behaviour, and apply self-imposed limits or restrictions where appropriate.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal or prohibited activities on the Platform.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide technical assistance via live chat and email.
• Promotional Communications: To send you information about bonuses, promotions, and new features — only where you have provided consent or where such communications are permitted under applicable law. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct statistical analysis, and improve the performance, functionality, and user experience of the 918ks Platform.
• Legal and Regulatory Compliance: To meet our obligations under applicable international gaming regulations, anti-money laundering laws, and data protection legislation.

918ks relies on one or more of the following lawful bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 918ks — specifically, the provision of gaming, payment, and support services under our Terms and Conditions.
• Legal Obligation: Processing is required to comply with legal obligations applicable to 918ks, including KYC verification, anti-money laundering reporting, and regulatory data retention requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of 918ks, such as fraud prevention, security monitoring, Platform improvement, and responsible gambling oversight — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent — for example, direct marketing communications — you have provided a clear, freely given, specific, and informed indication of your agreement. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

918ks does not sell, rent, or trade your personal data to third parties for their own commercial use. Your data may be shared in the following limited and controlled circumstances only:

• Payment Service Providers: We share transaction data with our authorised payment partners — including e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong), DuitNow/FPX operators, and cryptocurrency processors — solely for the purpose of executing deposits and withdrawals.
• Identity Verification Partners: We engage regulated third-party KYC service providers to assist in verifying user identity and documents. These providers are bound by strict data processing agreements and may not use your data for any purpose other than identity verification.
• Technology and Infrastructure Providers: Service providers who host, maintain, or support the Platform's technical infrastructure may process personal data on our behalf as data processors. All such providers are subject to contractual data protection obligations.
• Fraud and Security Providers: Third-party fraud detection and cybersecurity firms may process technical data (such as IP addresses and device fingerprints) to identify and prevent fraudulent activity on the Platform.
• Regulatory and Law Enforcement Authorities: We may disclose your personal data to competent regulatory bodies, financial intelligence units, or law enforcement authorities where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 918ks, its users, or the public.
• Professional Advisers: Legal, audit, and compliance advisers engaged by 918ks may access personal data as strictly necessary for the delivery of their professional services, subject to professional privilege and confidentiality obligations.

918ks retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account's active status and for a period of five (5) years following permanent account closure, in order to meet anti-money laundering and regulatory record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial regulatory requirements applicable in the jurisdiction of 918ks's operating licence.
• KYC and Identity Documents: Retained for the duration of the account and for five (5) years post-closure, unless a longer period is required by applicable law or regulation.
• Customer Support Records: Retained for up to three (3) years from the date of the support interaction, to enable dispute resolution and service quality monitoring.
• Marketing Consent Records: Retained for the period of consent and for one (1) year thereafter, as evidence of the consent obtained.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

918ks uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Enable personalised features such as remembering your preferred language, currency setting (MYR), and display preferences between sessions.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — pages visited, time spent, and navigation paths — to help us improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and protect your account from unauthorised access.

You may control cookie settings through your browser's preferences. Disabling non-essential cookies may affect certain Platform features but will not prevent you from accessing core gaming services. 918ks does not use third-party advertising cookies or cross-site tracking technologies for external behavioural advertising.

918ks implements a comprehensive range of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 918ks Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring confidentiality in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial account details, and authentication credentials — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within 918ks's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the personal data required to perform their specific job functions.
• Multi-Factor Authentication: Internal system access by 918ks staff requires multi-factor authentication. Users are also encouraged to enable two-factor authentication (2FA) on their own accounts where available.
• Regular Security Audits: Our Platform and infrastructure undergo periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses.
• Incident Response: 918ks maintains a formal data breach response procedure. In the event of a security incident affecting your personal data, we will notify relevant authorities and affected users as required under applicable data protection law.

Subject to applicable data protection law, you have the following rights with respect to your personal data held by 918ks. You may exercise any of these rights by contacting us at the details provided in Section 15 of this Policy:

To exercise any of the above rights, please contact our support team with a clear description of your request and sufficient information to verify your identity. We will acknowledge your request within 5 business days and respond fully within 30 calendar days.

The 918ks Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, solicit, or process personal data from persons under the age of 21.

918ks employs age verification measures as part of the account registration and KYC processes. Where we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any real-money balance to the originating payment method, and delete or anonymise all personal data associated with the account as soon as practicable.

If you believe that a person under the age of 21 has created an account on the 918ks Platform, please notify us immediately via the contact details in Section 15. We take such reports seriously and will investigate promptly.

The 918ks Platform integrates with third-party services necessary for platform operation, including payment processors, identity verification providers, and analytics tools. 918ks is not responsible for the privacy practices of third-party service providers, each of which operates under its own privacy policy.

All third-party service providers engaged by 918ks to process personal data on our behalf are required to enter into a formal Data Processing Agreement that restricts their use of personal data to the specific purpose for which they were engaged and imposes security and confidentiality obligations no less stringent than those set out in this Policy.

The 918ks Platform does not contain links to external websites. We do not operate any third-party advertising networks and do not permit external parties to place tracking cookies or pixels on our Platform.

As an internationally operating platform, 918ks may process or store personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Malaysia's Personal Data Protection Act 2010 (PDPA), 918ks will implement appropriate safeguards to ensure your data remains protected, which may include:

• Standard contractual clauses approved by the relevant data protection authority;
• Binding corporate rules where applicable;
• Transfers to jurisdictions that have been assessed as providing adequate levels of data protection; or
• Where required, obtaining your explicit consent for the specific transfer.

You may request information about the specific safeguards in place for any particular international transfer of your personal data by contacting us at the details in Section 15.

918ks reserves the right to update or revise this Privacy Policy at any time, in response to changes in applicable law, regulatory guidance, our data processing activities, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes to this Policy are material — meaning they significantly affect how we process your personal data or the rights available to you — we will notify you by email to your registered address or by posting a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the 918ks Platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to a revised Policy, you should cease use of the Platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 918ks, please contact us through any of the following channels. We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full substantive response within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link). Please mark your email "Privacy Enquiry" or "Data Subject Request" so it is routed to our data protection team promptly.
• Live Chat: Available 24 hours a day, 7 days a week through the live chat feature on the 918ks Platform. For formal data subject requests, we recommend following up by email to ensure a documented record of your request.
• Postal / Written Correspondence: For formal data subject rights requests or regulatory complaints, written correspondence should be directed to our data protection contact via email at the address above, clearly marked "Data Subject Rights Request — Privacy Policy".

918ks treats all privacy enquiries with the utmost seriousness and will not discriminate against any user for exercising their lawful data protection rights.