Rujukan Laman

Privacy Policy – How We Handle Your Information

We collect only what we need to run your account, process deposits via Touch 'n Go, GrabPay, Boost dan FPX, and keep the lobby secure.

Data minimisationSecure storageYour access rightsWithdrawal requests honouredNo third-party sale
wallet918 Privacy Policy – How We Handle Your Information
PRIVACY CONTACT

How to Exercise Your Rights

Request a data export, update your contact details, or ask us to delete your account through live chat or the privacy section of your account settings.

Live chat Open the chat widget at the bottom right of any page, select Privacy Request from the menu, and our support team will guide you through data access, correction, or deletion. Typical response under two minutes during Malaysia peak hours.
Account settings Head to the Privacy tab under your profile to download a copy of your data, change marketing preferences, or submit a deletion request. Downloads arrive as a JSON file within one business day; deletions take up to thirty days.
Email privacy team Send your request to [email protected] with your registered email and a brief description of what you need. We reply within seventy-two hours with next steps or a confirmation that your request is in progress.
DATA HANDLING

How We Secure and Manage Your Information

We encrypt account credentials and payment tokens with AES-256, restrict database access to engineering and compliance staff, and log every query for audit.

What we collect at signup

Email, mobile number, date of birth, and a payment method linked to Touch 'n Go, GrabPay, Boost or FPX.

Session and device logs

Each login records your IP, browser type, and device ID so we can spot unusual activity and prompt a password…

Cookies and local storage

We set a session cookie to keep you logged in and a preferences cookie to remember your language choice.

Payment data flow

When you deposit via Touch 'n Go, GrabPay, Boost or FPX the payment gateway encrypts your credentials and sends us…

Retention and deletion

Active accounts and their transaction history stay on file while you play.

Contact for changes

Open live chat, email [email protected], or visit the Privacy tab in your account settings to request a data export, update…

Common Questions About Your Data

These answers cover the privacy questions we see most often in live chat. If your situation is not listed here, reach out through the contact paths above and we will walk you through the exact steps for your account.

Yes. Head to the Privacy tab under your account settings and click Export My Data. We send a JSON file to your registered email within one business day, covering profile details, transaction history, session logs, and marketing preferences.

Click the unsubscribe link in any marketing email footer, or toggle off Email Promotions in the Notifications section of your account settings. You will still get transactional messages about deposits, withdrawals, and important policy changes.

We anonymise your gameplay logs immediately so they cannot be linked back to you. Transaction records stay on file for seven years to meet financial audit requirements, then we purge them from all backup systems. Your email and phone number are deleted within thirty days.

We share transaction data with the payment gateway that processes Touch 'n Go, GrabPay, Boost and FPX deposits, and with our fraud-detection provider to flag unusual login patterns. We never sell your data to advertisers or marketing platforms.

Yes. Go to Profile Settings, enter the new email or mobile number, then confirm it with the one-time code we send. The change applies immediately and we email both the old and new addresses to confirm the update.

Session cookies expire after twenty minutes of inactivity or when you close the browser. Preference cookies that remember your language choice stay for thirty days. Clear your browser cache any time to remove them; you will just need to log in again next visit.

Email [email protected] with details of your concern. We aim to respond within seventy-two hours. If you are not satisfied with our answer you can escalate to the data protection authority in your region where local law provides that right.