At 918kaya, protecting your personal data is not a compliance exercise — it is a fundamental obligation to the Malaysian players who trust us with their information. This Privacy Policy explains exactly what we collect, why we collect it, how we use it, and what rights you hold over your own data.
This Privacy Policy ("Policy") describes how 918kaya ("918kaya", "we", "us", "our") collects, processes, stores, discloses, and protects personal data in connection with your use of the 918kaya platform at 918kaya.asia and all associated services, features, and communications (collectively, the "Platform").
This Policy applies to all individuals who access or use the 918kaya Platform, including registered Members, prospective members, and visitors who browse the Platform without registering. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
918kaya is committed to compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and the data protection obligations imposed by its international gaming authority licence framework. Where applicable, 918kaya's data processing practices are also aligned with internationally recognised standards including the principles of the General Data Protection Regulation (GDPR) as a benchmark for best practice.
For the purposes of data protection law, 918kaya is the data controller in respect of personal data collected through the Platform. As data controller, 918kaya determines the purposes and means by which your personal data is processed.
Where 918kaya engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and cloud infrastructure providers), those providers act as data processors under contractual obligations that restrict their use of your data to the specific purposes authorised by 918kaya.
Data Controller Contact: For all data protection enquiries, you may reach the 918kaya data team at [email protected] with the subject line "Data Protection Enquiry".
918kaya collects personal data in the following categories, through the means indicated:
3.1 Registration & Identity Data
3.2 Financial Data
3.3 Technical & Usage Data
3.4 Communications Data
918kaya processes your personal data for the following purposes:
918kaya processes your personal data on the following legal grounds:
918kaya uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The categories of cookies used by 918kaya are as follows:
You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the Platform.
918kaya does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:
918kaya will never sell your personal data to marketing data brokers, advertising networks, or any other commercial third party not listed above.
Due to the international nature of online gaming operations, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, 918kaya ensures that adequate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian law, including through the use of standard contractual clauses and contractual restrictions on the use of transferred data by recipient parties.
If you would like further information about the specific safeguards applied to cross-border data transfers affecting your personal data, please contact 918kaya via the details provided in Section 15.
918kaya retains your personal data for as long as your Account remains active and for such additional period as is required to fulfil the purposes described in this Policy, comply with applicable legal obligations, resolve disputes, and enforce 918kaya's agreements.
As a general guide, the following retention periods apply:
Upon expiry of the applicable retention period, 918kaya will securely delete or anonymise your personal data in accordance with its data disposal procedures.
Subject to applicable law, you hold the following rights in respect of your personal data processed by 918kaya:
To exercise any of these rights, please submit a written request to 918kaya via the contact details in Section 15. 918kaya will respond within 30 days of receipt of a valid request, subject to identity verification.
918kaya strictly prohibits the registration of individuals under 21 years of age. We do not knowingly collect personal data from anyone under the age of 21. If 918kaya becomes aware that personal data has been collected from a person under 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe your child under the age of 21 has registered an Account with 918kaya, please contact us immediately at the details provided in Section 15.
918kaya implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Notwithstanding the above, no system of security is entirely immune to attack. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 918kaya will notify affected Members without undue delay in accordance with applicable law.
The 918kaya Platform may contain references to third-party game providers and services. These third-party services operate under their own privacy policies, over which 918kaya has no control and for which 918kaya accepts no responsibility. We recommend that you review the privacy policies of any third-party game studios whose games you play on the Platform, as those providers may collect certain gameplay data directly from your session.
918kaya reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material — meaning they significantly affect your rights or our obligations — 918kaya will notify you via your registered email address and/or a prominent notice on the Platform at least 14 days before the revised Policy takes effect.
Your continued use of the 918kaya Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept any amendment, you must cease using the Platform and may request account closure.
For any enquiries, requests, or complaints regarding 918kaya's handling of your personal data, please contact us through the following channel:
918kaya Data Protection Team
Email: [email protected] (plain text — not a clickable link)
Subject line: "Data Protection Enquiry" or "Privacy Complaint"
Response time: within 30 days of receipt
If you are not satisfied with 918kaya's response to your data protection complaint, you have the right to lodge a complaint with the relevant data protection authority in Malaysia — the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.
918kaya is committed to transparency. If you have questions about how your personal data is handled, reach out before you play — we're happy to clarify anything in this Policy.