918ki Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 918ki ("918ki", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the 918ki online gaming platform at 918ki.net and all associated services (collectively, the "Platform").

918ki is committed to protecting the privacy and security of all members, including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations across Malaysia. We process personal data responsibly, transparently, and in compliance with applicable data protection laws and the requirements of our international gaming authority licensing.

By registering for an account, using the Platform, or otherwise interacting with 918ki's services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, 918ki acts as the data controller in respect of personal data collected through the Platform. If you have questions about how 918ki processes your data, you may contact our Data Protection contact via the details provided in Section 15 of this Policy.

3. Categories of Personal Data We Collect

Depending on how you interact with the 918ki Platform, we may collect and process the following categories of personal data:

4. How We Collect Personal Data

1. Directly from you: When you register an account, complete KYC verification, make a deposit, contact support, or participate in a promotion.
2. Automatically: When you access and use the Platform, our servers and analytics tools automatically record technical and usage data including IP address, device information, and session activity.
3. From payment processors: When you deposit or withdraw funds, our licensed payment partners share transaction confirmation data necessary to credit or debit your account.
4. From identity verification services: During KYC verification, third-party identity verification providers may return verification results to 918ki confirming or rejecting the authenticity of submitted documents.
5. From fraud prevention services: Risk management and fraud detection tools may provide 918ki with risk scores or flags associated with certain accounts or transactions.

5. Purposes of Processing

918ki processes your personal data for the following purposes:

• To create, manage, and maintain your 918ki member account
• To verify your identity and comply with KYC/AML obligations under our licensing requirements
• To process deposits and withdrawals in Malaysian Ringgit (MYR)
• To deliver the Platform's gaming services including live casino, slots, sportsbook, and instant games
• To administer bonuses, promotions, and loyalty rewards
• To detect, prevent, and investigate fraud, money laundering, multi-accounting, and other prohibited conduct
• To provide customer support and respond to enquiries
• To enforce our Terms and Conditions and other Platform policies
• To send service-related notifications including security alerts, account updates, and important policy changes
• To improve the Platform through analysis of aggregate usage data and technical performance metrics
• To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities

6. Legal Basis for Processing

918ki relies on the following legal bases for processing personal data:

1. Contractual necessity: Processing is necessary to perform the contract between 918ki and you as a registered member — including account management, payment processing, and service delivery.
2. Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML obligations imposed by our gaming licensing authority.
3. Legitimate interests: Processing is necessary for 918ki's legitimate interests in operating a secure, fair, and fraud-free gaming platform, provided those interests are not overridden by your data protection rights.
4. Consent: Where we process data for purposes beyond those listed above (for example, optional marketing communications), we will seek your prior consent and you may withdraw that consent at any time.

7. Data Sharing & Disclosure

918ki does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment service providers: Touch n Go, Boost, Maybank, CIMB, Public Bank, and other licensed payment processors, solely for the purpose of processing transactions.
• Identity verification providers: Third-party KYC and document verification services engaged to confirm member identity.
• Fraud prevention and security services: Risk management platforms that assist 918ki in detecting and preventing fraudulent activity.
• Game content providers: Licensed game studios and aggregators that power the 918ki Casino game library may receive limited session data necessary for game operation and RNG certification audits.
• Regulatory and legal authorities: Where required by law, court order, or regulatory mandate, 918ki may disclose personal data to competent authorities.
• Corporate transactions: In the event of a merger, acquisition, or restructuring, personal data may be transferred to the successor entity subject to equivalent data protection commitments.

All third parties engaged by 918ki are contractually required to process personal data only for specified purposes and to maintain appropriate technical and organisational security measures.

8. International Data Transfers

918ki operates as an international gaming platform and some data processing may involve transfers to servers or service providers located outside Malaysia. Where such transfers occur, 918ki ensures that adequate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect the transferred data to a standard equivalent to that afforded within Malaysia.

9. Data Retention

918ki retains personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of the member relationship and any applicable statutory retention periods thereafter. Specific retention periods include:

• Account and KYC data: retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements
• Financial transaction records: retained for a minimum of five (5) years from the date of the transaction
• Support communications: retained for two (2) years from the date of the interaction
• Technical and usage logs: retained for up to twelve (12) months for security and performance analysis purposes

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with 918ki's data lifecycle management procedures.

10. Cookies & Similar Technologies

918ki uses cookies and similar tracking technologies on the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Performance and analytics cookies: Help us understand how members use the Platform — which pages are visited, where sessions originate, and how performance can be improved. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings and login status to improve your experience on return visits.

918ki does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair the functionality of the Platform.

11. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 918ki:

1. Right of access: You may request a copy of the personal data 918ki holds about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal data.
3. Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
4. Right to restriction: You may request that we restrict processing of your data in certain circumstances.
5. Right to data portability: You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
6. Right to object: You may object to processing based on legitimate interests, including direct marketing.
7. Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 918ki support via live chat or email at [email protected]. We will respond within 30 calendar days. Identity verification may be required before we process your request.

12. Security Measures

918ki implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit
• Bcrypt hashing for stored passwords — plain-text passwords are never stored
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular independent security audits and penetration testing
• Separation of financial data and personal credentials across encrypted storage layers
• Intrusion detection systems and 24/7 security monitoring

Despite these measures, no internet transmission or electronic storage system is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, 918ki will notify you in accordance with applicable legal requirements.

13. Children's Privacy

The 918ki Platform is strictly for individuals aged 21 and over. 918ki does not knowingly collect personal data from persons under 21 years of age. If you believe that a person under 21 has registered for an 918ki account, please contact our support team immediately. Any such account will be suspended and the personal data deleted in accordance with applicable law.

14. Changes to This Privacy Policy

918ki reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify members via email or a prominent on-Platform notice prior to the updated Policy taking effect. The "Last Updated" date at the top of this page indicates the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed of how 918ki is protecting your information.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact 918ki through the following channels:

• Live Chat: Available 24/7 through the Platform. Response within 3 minutes.
• Email: [email protected]

For formal data subject requests (access, deletion, rectification), please email with the subject line "Data Subject Request — [Your Name]" and include a copy of your identification for verification purposes. All data requests will be acknowledged within 5 business days and resolved within 30 calendar days.