918wallet Privacy Policy — Personal Data Protection for Malaysian Members

918wallet ("We", "Platform", "Company") takes our responsibility to protect the privacy and personal data of every individual who interacts with our platform seriously. This Privacy Policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and global industry best practices.

This policy clearly and transparently explains how 918wallet collects, stores, processes, uses, and protects your personal information as a member or visitor of our platform. It applies to all services offered by 918wallet, including the web platform, mobile app, customer support system, and all our official communication channels.

By registering an account, visiting our website, or using any 918wallet service, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact support to close your account.

918wallet collects only the personal data strictly necessary to provide our members with a secure, compliant, and high-quality service. The following are the categories of data we may collect:

Personal Identification Data:

Contact Data:

Financial Data:

Technical & Usage Data:

918wallet collects your personal data through various channels in the normal course of operating our platform:

• Account Registration: When you complete the registration form on 918wallet, you provide us directly with basic information such as your name, email address, phone number, and date of birth.
• Identity Verification (KYC): To comply with anti-money laundering (AML) requirements and verify member eligibility, we may request identity documents such as a copy of your MyKad or passport during the KYC process.
• Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), or any other method, your transaction details are recorded automatically.
• Platform Activity: Gaming activity logs — including slots played, Sports Betting (Malaysia Super League, EPL, badminton), e-sports, live baccarat, and other games — are recorded for security and support purposes.
• Support Communications: All communications via live chat, email, or messaging with the 918wallet support team are retained for record-keeping and service improvement purposes.
• Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to enhance your experience. See Section 7 for more details.

918wallet uses your personal data only for legitimate, limited, and agreed-upon purposes. The following are the primary purposes for which your data is used:

918wallet does not sell, rent, or exchange members' personal data to any third party for their own commercial purposes. However, in the course of operating the platform, we may share your personal data with the following parties under limited and protected circumstances:

• Payment Service Provider: Transaction information required for processing is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks (Maybank, CIMB, and others via FPX) solely to process your deposits and withdrawals.
• Game Software Provider: Non-identifiable statistical game data is shared with certified software providers (such as Playtech, Microgaming, PG Soft, JILI) for technical and quality control purposes.
• KYC Service Provider: For identity verification purposes, your documents may be shared with approved KYC service providers who are bound by strict confidentiality agreements with 918wallet.
• Regulatory Authorities & Law Enforcement: 918wallet is required under Malaysian law to disclose personal data to the relevant authorities when lawfully directed to do so, such as in financial crime or money laundering investigations.
• Cloud Services & Hosting: Data is stored on servers managed by high-security cloud service providers. All contracts with these providers mandate data protection in compliance with Malaysia's PDPA standards.

918wallet invests seriously in cybersecurity infrastructure to ensure your personal data remains protected at all times. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your browser/app and 918wallet's servers is encrypted using the same highest-grade Transport Layer Security (TLS) protocol adopted by Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive data such as financial information and identity documents are encrypted at rest using AES-256 standards.
• Multi-Layered Access Control: Only authorised personnel with a genuine operational need may access members' personal data. All access is logged and audited on a regular basis.
• Regular Security Testing: The 918wallet platform undergoes penetration testing and security audits by independent cybersecurity firms at least twice a year.
• Real-Time Threat Detection: A 24/7 threat monitoring system is in place to detect and respond to any suspicious activity or intrusion attempts in real time.
• Secure Data Backup: Data is automatically backed up to a secure, separate location to ensure availability and recovery in emergency situations.

918wallet uses cookies and similar tracking technologies to enhance your experience on our platform, understand usage patterns, and ensure the security of your session. Cookies are small text files stored on your device when you visit our platform.

You can manage your cookie settings through your browser. Please note, however, that disabling essential cookies may affect certain functions of the 918wallet platform, including the ability to log in to your account.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 918wallet:

To exercise any of the above rights, please contact the 918wallet Privacy Officer by email at privacy@918wallet.app or via live chat. We will process your request within 30 days upon receiving a complete and valid request.

918wallet retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law:

• Active Account Data: Throughout your 918wallet membership plus the mandatory retention period following account closure.
• Financial Transaction Records: Minimum 7 years from the transaction date, as required under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• KYC Documents: Minimum 5 years from account closure or the KYC date, whichever is later.
• Support Communication Logs: 3 years from the date of communication.
• Analytics Data (Anonymous): May be retained indefinitely as it cannot be used to identify any individual.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with industry-standard data disposal procedures.

918wallet strictly does not offer services to individuals under the age of 18. Our platform does not knowingly collect or process personal data from minors.

If you believe that someone under the age of 18 has registered for or is using the 918wallet platform, please contact us immediately at support@918wallet.app. We will take immediate action to investigate and close the account in question, and delete all data collected.

918wallet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Malaysian legal requirements, or developments in platform operations. The updated effective date will always be displayed at the top of this document.

For material amendments (significant changes that affect your privacy rights), we will provide notice via:

• An email to the address registered on your account at least 14 days before the amendment takes effect.
• A prominent notice on the 918wallet platform's main page.
• In-app notification on your mobile device during your next login session.

Your continued use of the 918wallet platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion as described in Section 8.

If you have any questions, concerns, or complaints regarding how 918wallet handles your personal data, please contact our Data Protection Officer (DPO):

• Dedicated Privacy Email: privacy@918wallet.app
• General Support Email: support@918wallet.app
• Live Chat: Available 24/7 via the 918wallet platform — state "Data Privacy Enquiry" to the support agent.

We are committed to responding to all privacy-related enquiries within 5 business days and resolve complaints within 30 days from the date of receipt of a complete complaint.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPD) or the relevant regulatory body.

This Privacy Policy is in Bahasa Melayu as the official language of the 918wallet platform in Malaysia. In the event of any inconsistency between a translated version and this Bahasa Melayu version, the Bahasa Melayu version shall prevail.