Privacy Policy
At 918ki, the privacy of our players is a responsibility we take seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your information as a registered user of our platform.
Our Privacy Commitments at a Glance
A plain-English summary before you read the full policy below
Your Data Is Encrypted
All personal and financial data transmitted through 918ki is protected by 256-bit SSL encryption — the same standard used by major global banks and financial institutions.
Never Sold to Third Parties
918ki does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is used only for the purposes described in this policy.
Lawful Processing Basis
All personal data processing at 918ki has a defined lawful basis — contractual necessity, legal obligation, legitimate interest, or your explicit consent. We do not collect data without purpose.
Data Minimisation
We collect only the data that is strictly necessary to deliver our services, comply with regulatory obligations, and keep your account secure. We do not gather data for its own sake.
Your Rights Are Real
You have the right to access, correct, port, and in certain circumstances delete your personal data. You can also object to certain processing activities. See Section 9 for full details.
Transparent Cookie Use
918ki uses cookies and similar technologies only for session management, security, and platform analytics. No third-party tracking cookies are placed without your prior consent.
1 Introduction
This Privacy Policy ("Policy") is issued by 918ki ("the Company", "we", "us", or "our") and applies to all personal data collected from individuals ("Users", "you", or "your") who access or use the online casino and sports betting platform available at https://918ki.cam ("the Platform").
918ki is committed to protecting the privacy and security of the personal data entrusted to us by our players. This Policy describes the categories of personal data we collect, the lawful bases upon which we process it, how it is used, how long it is retained, who it may be shared with, and the rights available to you as a data subject.
By registering for an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices as described herein, you should discontinue use of the Platform and contact us to close your account.
2 Definitions
The following terms have the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, or online identifiers. |
| "Processing" | Any operation performed on personal data — including collection, recording, organisation, storage, alteration, retrieval, use, disclosure, or erasure. |
| "Data Controller" | 918ki — the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of 918ki under a contractual data processing agreement. |
| "Sensitive Data" | A subset of personal data requiring additional protection — including identity document numbers, financial account details, and biometric data used for verification. |
| "Cookies" | Small text files stored on your device by a web browser at the instruction of a website, used to retain session state and preference information. |
| "KYC Data" | Identity and address verification documents submitted by Users as part of the Know Your Customer compliance process. |
3 Personal Data We Collect
918ki collects personal data from Users through multiple channels. The categories of data collected, and the context in which they are gathered, are set out below.
3.1 Account Registration Data
When you create a 918ki account, we collect:
- Full legal name
- Date of birth (for age verification — 21+ only)
- Email address
- Mobile phone number
- Residential address (including city, state, and postcode within Malaysia)
- Preferred username and encrypted password
- Preferred currency (MYR by default for Malaysian accounts)
3.2 KYC & Verification Data
To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations, we collect:
- Copies of government-issued identity documents — MyKad (NRIC), valid Passport, or Driver's Licence
- Proof of residential address — utility bills (TNB, Syabas, Indah Water), bank statements, or official correspondence dated within three months
- Selfie photographs holding the identity document
- Source of funds documentation for high-value accounts
3.3 Financial Transaction Data
When you deposit or withdraw funds through our supported Malaysian payment channels — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and direct bank transfers via Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank — we record:
- Transaction amounts (in MYR or cryptocurrency equivalent)
- Payment method identifiers (masked card or account numbers, e-wallet reference IDs)
- Transaction timestamps and reference numbers
- Cryptocurrency wallet addresses (for BTC, ETH, USDT, BNB deposits and withdrawals)
3.4 Gaming Activity Data
- Bet history, game session logs, win/loss records
- Bonus and promotion usage history
- Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)
3.5 Technical & Device Data
- IP address and approximate geolocation at login
- Device type, operating system, and browser version
- Session duration and navigation patterns within the Platform
- Cookies and similar tracking technologies (see Section 10)
3.6 Communications Data
- Customer support chat transcripts and email correspondence
- Feedback, survey responses, and formal complaint submissions
- Marketing preference settings and opt-out records
4 Lawful Basis for Processing
918ki processes personal data only where a valid lawful basis exists. The applicable basis varies depending on the category of data and the purpose of processing:
| Processing Activity | Lawful Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to deliver the services you have requested. |
| KYC and identity verification | Legal obligation — required under AML, CTF, and responsible gambling regulations. |
| Payment processing | Performance of contract — necessary to process deposits and withdrawals. |
| Fraud detection and security monitoring | Legitimate interest — to protect the platform and its users from fraudulent activity. |
| Responsible gambling monitoring | Legal obligation and legitimate interest — to identify at-risk behaviour and intervene appropriately. |
| Promotional communications | Consent — sent only where you have opted in; you may withdraw consent at any time. |
| Platform analytics and improvement | Legitimate interest — to improve platform performance and user experience. |
5 How We Use Your Personal Data
918ki uses the personal data we collect for the following purposes:
- Account Delivery: Creating, maintaining, and managing your 918ki account; authenticating your identity at login; processing deposits and withdrawals in Malaysian Ringgit (MYR).
- Regulatory Compliance: Conducting KYC and AML checks as required by our licensing framework; reporting suspicious transactions to competent authorities where legally required; enforcing age verification (21+ policy).
- Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour; administering self-exclusion, deposit limit, and session control tools; contacting at-risk users with support information.
- Security and Fraud Prevention: Detecting and investigating suspicious account activity, unauthorised access, duplicate accounts, and bonus abuse; maintaining audit logs for investigation purposes.
- Customer Support: Responding to enquiries, resolving disputes, and managing formal complaints submitted via live chat, email, or other support channels.
- Platform Improvement: Analysing aggregated usage data to improve platform navigation, game loading performance, and payment processing efficiency.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — exclusively to Users who have provided explicit opt-in consent. You may withdraw consent at any time through your account settings or by contacting support.
6 Data Sharing & Disclosure
918ki does not sell, rent, or exchange your personal data for commercial gain. We may share your data with the following categories of recipient only where necessary and under appropriate safeguards:
6.1 Payment Service Providers
To process transactions, we share relevant financial data with licensed payment processors supporting our Malaysian payment channels — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow and FPX infrastructure providers, and banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank). These processors operate under their own privacy policies and applicable financial regulations.
6.2 KYC and Compliance Partners
We may share identity documents and verification data with licensed third-party KYC and AML service providers who process data on our behalf under contractual data processing agreements with equivalent privacy protections.
6.3 Regulatory and Law Enforcement Authorities
We are required by law to disclose personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies in response to lawful orders, warrants, or statutory reporting obligations — including reporting of suspicious financial activity. 918ki will not notify Users of such disclosures where doing so would be prohibited by law or would compromise an investigation.
6.4 Technology and Infrastructure Providers
918ki engages cloud hosting, cybersecurity, and data analytics service providers who process platform data as Data Processors under binding contractual agreements. These providers are prohibited from using your data for their own purposes.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of substantially all of 918ki's assets, personal data may be transferred to the acquiring entity. Affected Users will be notified in advance and given the opportunity to close their accounts if they do not wish their data to be transferred.
7 Data Retention
918ki retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure |
| KYC and identity documents | Minimum 5 years from last transaction, as required by AML regulations |
| Financial transaction records | Minimum 5 years from transaction date for audit and regulatory purposes |
| Gaming activity logs | 3 years from last activity date |
| Customer support communications | 2 years from resolution of the relevant matter |
| Marketing consent records | 3 years from withdrawal of consent or account closure |
| Self-exclusion records | Retained indefinitely to prevent re-registration during exclusion period |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual.
8 Security Measures
918ki implements a multi-layered approach to data security, designed to protect personal data against unauthorised access, disclosure, alteration, or destruction:
- Transport Encryption: All data transmitted between your device and the 918ki Platform is protected by 256-bit TLS/SSL encryption.
- At-Rest Encryption: Sensitive personal data — including identity documents and financial information — is encrypted in our databases using industry-standard encryption algorithms.
- Access Controls: Personal data is accessible only to 918ki personnel who require it to perform their job functions. All access is logged and audited.
- Password Security: User passwords are stored using one-way cryptographic hashing. 918ki never stores passwords in plaintext and will never transmit a password to you.
- Fraud Monitoring: Automated real-time monitoring systems detect and flag suspicious access patterns, transaction anomalies, and account takeover attempts.
- Penetration Testing: The Platform undergoes regular security assessments conducted by independent cybersecurity specialists.
9 Your Rights
As a data subject, you have the following rights in relation to your personal data held by 918ki. These rights are subject to applicable legal limitations and identity verification requirements:
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary — subject to our legal retention obligations (e.g., AML record-keeping requirements).
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being verified.
Right to Portability
Receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease processing immediately.
To exercise any of the above rights, submit a written request to [email protected]. Please include your full name, registered email address, and account username so we can verify your identity before responding. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days, extendable to 60 days for complex requests.
10 Cookies & Similar Technologies
The 918ki Platform uses cookies and similar browser-based technologies to ensure correct platform functionality, maintain security, and analyse usage patterns. We do not use third-party advertising cookies without your prior consent.
10.1 Types of Cookies Used
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for platform operation — session authentication, security tokens, CSRF protection. Cannot be disabled without breaking platform functionality. |
| Functional | Remember your language preference, display settings, and responsible gambling tool configurations across sessions. |
| Analytics | Measure page load times, feature usage frequency, and navigation patterns to help us improve the platform. Data is aggregated and anonymised. |
| Security | Device fingerprinting tokens used by our fraud detection systems to identify unusual login patterns or suspected account takeover activity. |
10.2 Managing Cookies
You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For guidance on cookie management, consult your browser's help documentation.
11 International Data Transfers
918ki may process or store certain categories of personal data on servers located outside of Malaysia. Where data is transferred internationally — for example, to cloud infrastructure providers or licensed KYC processors — we ensure that appropriate safeguards are in place, including contractual data transfer agreements that impose equivalent data protection obligations on the recipient.
We select international processing partners carefully and require that they maintain security standards consistent with our own. You may request details of any international data transfers affecting your personal data by contacting us at the address in Section 14.
12 Minors & Age Restriction
The 918ki Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age is verified during the KYC process, and any account discovered to belong to a minor will be immediately suspended and all balances frozen pending investigation.
If you believe that a minor has registered an account or provided personal data to 918ki, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of all personal data associated with the account, without undue delay.
13 Changes to This Policy
918ki reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Where changes are material, we will notify registered Users via in-platform notification or registered email address at least 14 days prior to the updated Policy taking effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. The current version of this Policy is always accessible at https://918ki.cam/privacy-policy.
14 Contact Us & Data Protection
For any privacy-related query, data subject rights request, or concern about how 918ki handles your personal data, please contact our Data Protection team through the following channels:
- Email: [email protected] — plain text address, not a clickable link
- Subject Line: Include "Privacy Request" or "Data Protection Enquiry" in your email subject for prioritised routing
- Live Chat: Available 24/7 through the Platform in English, Bahasa Melayu, and Mandarin — average response time under 5 minutes
- Response Time: We acknowledge all privacy requests within 5 business days and provide a substantive response within 30 calendar days
For responsible gambling queries specifically, please visit our Responsible Gambling page, which contains detailed guidance on self-exclusion tools, deposit limits, and external support resources available to Malaysian players.
Questions About Your Privacy?
Our support team is available 24/7 in English, Bahasa Melayu, and Mandarin. If any part of this Privacy Policy is unclear, or if you wish to exercise a data rights request, reach out and we will assist you promptly. For players aged 21 and above only.