Privacy Policy 918k –
User Data Protection

1 Introduction

918k takes our responsibility toward user privacy seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection standards. It applies to all users who access the 918k platform via the website 918k.fun or our official mobile app.

This document describes the types of personal information we collect, the purposes for collection, how we process and protect your data, and the rights you hold regarding that information. We believe transparency is the foundation of trust — and your trust is what we value most.

By registering an account or using 918k services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2 Data We Collect

We collect various types of information depending on how you interact with the 918k platform. The following are the categories of data we may process:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive personal information such as medical records or biometric data except in very limited circumstances and with your explicit consent.

3 How We Use Your Data

The data we collect is used exclusively for the following purposes:

• Account management: To register, verify, and manage your account, including the required KYC process.
• Transaction processing: To process deposits, verify payments, and facilitate fund withdrawals to your bank account or e-wallet.
• Service delivery: To give you access to all platform features including slot games, sports betting, bingo, and the game lobby.
• Security & fraud prevention: To detect and prevent fraudulent activity, money laundering, or platform abuse.
• Regulatory compliance: To fulfil legal obligations and the requirements of relevant regulatory bodies.
• Customer support: To respond to enquiries, resolve complaints, and provide technical assistance.
• Platform improvement: To analyse aggregate usage patterns in order to improve the user experience.
• Service communications: To send important notifications relating to your account, policy changes, or security information.

4 Legal Basis for Data Processing

918k processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract performance: Processing required to carry out the service agreement between you and 918k, including account management and transaction processing.
• Legal compliance: Processing required to comply with legal obligations such as KYC requirements, financial reporting and anti-money laundering prevention.
• Legitimate interests: Processing required for legitimate business interests such as fraud prevention, platform security and service improvement.
• Consent: For certain processing activities such as the use of non-essential cookies or marketing communications, we will obtain your consent beforehand.

You have the right to withdraw consent at any time without affecting the validity of processing carried out prior to withdrawal. Withdrawing consent for data essential to account operations may require the closure of your account.

5 Data Sharing with Third Parties

918k does not share your personal data with third parties except in the following limited circumstances:

• Payment service providers: Required transaction data is shared with payment gateway providers, banks and e-wallet providers to securely process your deposits and withdrawals.
• Identity verification services: KYC information is shared with approved verification service providers to verify user identity in accordance with legal requirements.
• Cybersecurity providers: Minimum technical data is shared with security partners to detect and prevent cyber threats and fraudulent activity.
• Regulatory bodies & law enforcement: We will disclose information when required by law, court order or a legitimate request from the authorities.

All third parties we work with are bound by strict data protection agreements and are prohibited from using your data for any purpose other than those specified. We select partners whose security standards are equal to or higher than those of 918k.

6 Data Security

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

• Data encryption: All data transmitted between your device and 918k servers is protected by 256-bit SSL/TLS encryption. Sensitive data is stored in encrypted form using industry-standard algorithms.
• Access control: Access to user data is strictly limited based on the need-to-know principle. Staff with access to sensitive data undergo background checks and regular security training.
• Continuous monitoring: Our systems are monitored 24 hours a day, 7 days a week to detect any suspicious activity or intrusion attempts.
• Security audits: Independent security assessments are conducted periodically to identify and address any vulnerabilities.
• Incident response plan: We have clear procedures in place to handle any data security breaches, including notification to affected users within the timeframe required by law.

While we take all reasonable steps to protect your data, no security system is perfect. We encourage you to also take personal protective measures, such as using a strong and unique password and not sharing your login credentials.

7 Data Retention Period

918k retains your personal data only for as long as necessary for the stated purposes or as required by law:

• Active account data: Retained for the duration your account is active and for an additional period after account closure as required by law.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial and tax regulatory requirements.
• KYC documents: Retained for a minimum of 5 years after account closure, in line with anti-money laundering requirements.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Non-essential cookie data: Deleted or expired within 13 months from the date of creation.

Once the retention period expires, data will be securely deleted or permanently anonymised using methods that ensure the data cannot be recovered.

8 Cookies & Tracking Technologies

The 918k platform uses cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

• Essential cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how users interact with the platform (pages visited, time spent) in aggregate form without identifying individuals. Helps us improve platform performance.
• Functional cookies: Stores your preferences such as language, display settings and login information you have authorised to be remembered.

You can manage cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect platform functionality or your user experience.

9 User Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our Data Protection Officer via the email address provided in the next section. We will verify your identity before processing any request in order to protect your privacy.

10 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the 918k Data Protection Officer:

• Email: [email protected]
• Mailing address: Data Protection Division, 918k Platform, Malaysia
• Response time: Within 5 business days for general enquiries; 21 days for data subject rights requests

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority in your jurisdiction.

918k is committed to resolving every privacy concern fairly and transparently. Your privacy is not merely a legal obligation to us — it is a core value we uphold in every business decision we make.