Personal Data Protection

Privacy Policy 918 Kaya – Your Privacy Is a Trust We Guard Wholeheartedly

At 918 kaya, we believe privacy is more than a legal requirement – it is a fundamental right of every player. This document clearly sets out how we collect, use, store, and protect the personal information of our Malaysian players.

Updated: January 2026  |  Region: Malaysia
256-bit SSL
PDPA Compliance
No Data Sales
Privacy Guaranteed

Important Note: This Privacy Policy describes our privacy practices 918 Kaya (918kaya.biz). By registering an account or using any of our services, you confirm that you have read and understood this policy. Please review this document periodically as it may be updated from time to time.

1 Introduction & Scope of This Privacy Policy

918 Kaya ("we", "platform", "918kaya.biz") are fully committed to protecting the privacy and personal data security of every Malaysian player who uses our services. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in data protection.

This document applies to all information you provide to 918 Kaya, whether through account registration, use of our gaming platform, financial transactions, interactions with our customer support team, or any other means by which you communicate with us. It also covers information we collect automatically when you use our website or application.

918 Kaya's Core Commitments: We never sell, rent, or disclose players' personal data to third parties for marketing purposes without your explicit consent. Your privacy is not a commodity we trade in.

2 Types of Personal Data We Collect

918 Kaya collects various types of information depending on how you interact with our platform. We only collect data that is strictly necessary for the stated purposes:

Data You Provide Directly:

  • Full name (as stated on your MyKad or Malaysian passport)
  • An active Malaysian mobile number
  • Valid email address
  • Date of birth (for age verification)
  • National identity card number (MyKad) or passport number
  • Bank account or e-wallet details for withdrawal purposes (FPX, Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
  • Information you share when contacting customer support

Automatically Collected Data:

Data Type Example Purpose
Device Data Phone model, operating system, device ID Security & verification
Network Data IP address, internet service provider Fraud prevention
Usage Data Pages visited, session duration, games played Product improvement
Cookie Data Session cookies, preference cookies User experience
Transaction Data Deposit, withdrawal, and betting history Compliance & financial records

3 How 918 Kaya Uses Your Data

918 Kaya only using your personal data for legitimate purposes to which you have given consent, whether expressly or implicitly through your use of our platform. The primary purposes for which your data is used are:

  • Account management: Creating and maintaining your 918 Kaya account, including the login process, identity verification, and profile updates.
  • Service provision: Allows you to play games, place Sports Betting on the Malaysia Super League and EPL, access live casino baccarat, jackpot slots, and virtual sports.
  • Transaction processing: Securely processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
  • Customer support: Resolving enquiries, complaints, and support requests in Bahasa Malaysia.
  • Legal compliance: Fulfilling obligations under Malaysia's PDPA 2010 and related regulations.
  • Service communications: Sending important notifications relating to your account, policy changes, and security updates.
  • Marketing (with consent): With your consent, sending promotional information about 918 kaya bonuses, special offers, and relevant campaigns.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act (PDPA) 2010, 918 Kaya processes your personal data on the following bases:

  • Contractual compliance: Processing required to fulfil the service agreement between you and 918 Kaya.
  • Legal obligations: Processing required under Malaysian law, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
  • Legitimate interests: Processing for the purposes of platform security, fraud prevention, and service improvement.
  • Consent: For optional marketing communications and the use of non-essential cookies, we require your explicit consent.

5 Data Sharing & Disclosure to Third Parties

918 Kaya does not sell, rent, or trade players' personal data under any circumstances. However, we may share limited data with selected third parties in the following situations:

  • Payment providers: Data required to process deposit and withdrawal transactions via authorised e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and local Malaysian banks).
  • Game providers: Gaming companies that supply slots, live casino, and virtual sports content to the 918 Kaya platform, subject to strict data protection agreements.
  • Legal authority: The Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other lawful regulatory bodies when required by law or court order.
  • Fraud prevention services: Third-party service providers that assist 918 Kaya in detecting and preventing fraudulent activity, subject to strict confidentiality agreements.

All third parties that receive data from 918 Kaya are bound by data protection agreements that prohibit them from using or disclosing such data for any purpose other than those specified. We do not share data with advertisers or third-party marketing platforms without your explicit consent.

6 Data Retention Period

918 Kaya retaining your personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer period is required or permitted under Malaysian law.

Data CategoryRetention PeriodReason
Active account dataFor the duration of the active accountService provision
Financial transaction records7 years after the transactionPDPA & AML Obligations
KYC verification data5 years after account closureLegal compliance
Support communication logs3 yearsDispute resolution
Non-essential cookie dataUntil deleted / 1 yearUser experience
Inactive accountsDeleted after 12 months of inactivitySecurity & data hygiene

Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

7 Data Security Measures at 918 Kaya

918 Kaya employs multiple layers of technical and organisational safeguards to keep your personal data protected against any unauthorised access, modification, or disclosure:

256-bit SSL Encryption

All data transmitted between your device and 918 Kaya's servers is encrypted using 256-bit Secure Socket Layer (SSL) — the same standard used by Malaysia's leading banks.

Two-Factor Authentication (2FA)

918 kaya provides two-factor authentication via OTP to your Malaysian phone number as an added layer of security for every login and key transaction.

Encrypted & Protected Database

All player data is stored in encrypted databases with access strictly limited to authorised personnel on a need-to-know basis.

24/7 Security Monitoring

918 Kaya's security systems are continuously monitored to detect and respond to any threats or suspicious activity in real time.

Regular Security Audits

918 Kaya undergoes periodic independent security audits conducted by qualified third parties to ensure our data protection systems remain up to date and meet the latest standards.

8 Your Rights as a Data Subject

As a player 918 Kaya, you have the following rights regarding your personal data under Malaysia's PDPA 2010. You may submit a request to exercise any of these rights by contacting us at support@918kaya.biz:

Right of Access

You have the right to request a copy of the personal data we hold about you. 918 kaya will provide this data within 21 days of receiving a valid request.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Log in to your account to update basic information, or contact support for more complex amendments.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for the original purpose of collection, subject to any applicable legal retention obligations.

Right to Withdraw Consent

You may withdraw your consent for marketing processing at any time. This does not affect any processing that has already taken place prior to your withdrawal.

Right to Data Portability

You have the right to receive the data you have provided to 918 Kaya in a structured, machine-readable format, and to transfer it to another service provider if needed.

Right to Restriction of Processing

In certain circumstances, you may request that the processing of your data be temporarily restricted – for example, while you are disputing the accuracy of the data we hold.

9 Cookies, Tracking Technologies & Your Controls

918 Kaya uses cookies and similar tracking technologies to enhance your user experience, understand usage patterns, and maintain platform security. Cookies are small text files stored on your device when you visit our website.

Cookie TypesPurposeStatus
Session Cookies Maintaining your login status and session information on 918 Kaya Mandatory
Security Cookies Detecting and preventing fraud, CSRF attacks, and other security threats Mandatory
Preference Cookies Saves your language, theme, and display preferences Optional
Analytics Cookies Helps us understand how players use 918 Kaya so we can make improvements Optional

You can manage or delete cookies through your browser settings at any time. However, disabling mandatory cookies may affect certain functions of the platform. 918 Kaya.

10 Protection of Children's Data

Zero Tolerance Policy: 918 kaya's services are strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. Should we discover that an account has been created by an underage individual, the account will be terminated immediately and all associated data securely deleted.

If you are a parent or guardian and become aware that your underage child has registered an account 918 Kaya, please contact us immediately at support@918kaya.biz so we can take the appropriate action without delay.

11 Links to Third-Party Websites

Platform 918 Kaya may contain links to third-party websites or services, such as payment providers (Maybank2u, CIMB Clicks, and others). This Privacy Policy does not apply to those third-party websites.

We encourage you to read the privacy policy of each website you visit separately. 918 Kaya is not responsible for the privacy practices or content of any third-party websites that may be linked from our platform.

12 Amendments to This Privacy Policy

918 Kaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

  • Email notification to your registered email address
  • Clear notice on the 918 Kaya platform's main page
  • Pop-up notification upon next login

The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Continued use of the platform 918 Kaya following the issuance of a change notice shall be deemed as your acceptance of the updated Privacy Policy.

13 Contact the 918 Kaya Data Protection Officer

If you have any questions or concerns, or wish to submit a request relating to your privacy rights, please contact our Data Protection Officer (DPO) 918 Kaya through the following channels:

Privacy Email: privacy@918kaya.biz
General Support: support@918kaya.biz
Live Chat: Available on the 918 Kaya platform, 24/7 in Bahasa Malaysia
Response Time: Within 7 business days for privacy enquiries

For complaints that have not been satisfactorily resolved, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPD) in accordance with the provisions of PDPA 2010. However, we strongly encourage you to contact us first so that we can resolve your issue directly and promptly.

Why Your Privacy Is Safe with 918 Kaya

Six data protection commitments that set 918 Kaya apart from other platforms

Full 256-bit SSL Encryption

All data transmitted between your device and 918 kaya's servers is encrypted using 256-bit SSL – the same standard used by major banking institutions in Malaysia.

Full PDPA Malaysia Compliance

918 Kaya fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. Our data protection practices are audited regularly to ensure ongoing compliance.

No Sale of Data to Third Parties

918 kaya has never sold, rented, or disclosed player data to advertisers or marketing parties without your explicit consent. Your data is not our product.

24/7 Security Monitoring

918 kaya's security systems are monitored around the clock to detect and prevent any unauthorised access attempts, data breaches, or cyber threats.

Players' Full Rights Over Their Data

You are in full control — request access, correction, deletion, or portability of your data. The 918 Kaya privacy team will process all requests within 7 business days.

Malaysia e-Wallet Transaction Security

Your payment information processed via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX is handled with an additional layer of security and is not stored on 918 kaya's servers.

918 Kaya Related Policy Documents

Also read other important documents that form our commitment to players in Malaysia

Privacy Guaranteed

Play at 918 Kaya with Complete Confidence

Your personal data is protected to the highest standards. Register a free account today and enjoy a safe, fair, and responsible gaming experience alongside hundreds of thousands of Malaysian players.

256-bit SSL No Data Sales PDPA Compliance Privacy Guaranteed
Bahasa Melayu