Your privacy matters to us. This Privacy Policy explains in plain, precise terms what personal data 918kss collects from Malaysian players, how we use and store it, who we share it with, and what rights you hold over your own information. We are committed to handling your data responsibly and transparently.
Effective Date: 1 January 2026Your Data, Protected
Privacy at a Glance
These six commitments summarise how 918kss approaches data protection for all Malaysian players. The full legal detail is in the sections below — these cards give you the key takeaways at a glance.
918kss collects only the personal data strictly necessary to operate your account, process payments in MYR, and comply with our licensing and KYC obligations. We do not collect data for its own sake.
918kss does not sell, rent, or trade your personal data to third parties for marketing, advertising, or any commercial purpose. Your data is yours — we are custodians of it, not owners.
All personal and financial data transmitted between your device and 918kss is protected using TLS/SSL encryption. Stored data is encrypted at rest using AES-256 industry-standard encryption protocols.
You hold the right to access, correct, port, and request deletion of your personal data. 918kss honours these rights with a clear request process and defined response timelines — not just as legal obligations, but as genuine commitments.
We do not retain your data indefinitely. Retention periods are tied to the purpose for which data was collected — account data is held for the duration of your account plus any mandatory regulatory retention period, after which it is securely deleted.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, 918kss will notify affected players promptly and in accordance with applicable data protection obligations — including the nature of the breach, data categories affected, and recommended protective actions.
This Privacy Policy (the "Policy") is published by 918kss (referred to herein as "918kss", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at 918kss.cam (the "Platform"). This Policy applies to all individuals who visit, register upon, or use the Platform, including players located in Malaysia and other jurisdictions (referred to herein as "you", "the User", or "the Player").
918kss is committed to protecting the privacy and security of all personal data that we process in connection with the operation of the Platform. This Policy is designed to be read in plain, accessible English so that every player — from Kuala Lumpur to Johor Bahru — can understand how their data is handled, stored, and protected without requiring a legal background to navigate.
This Policy should be read alongside the 918kss Terms & Conditions and Responsible Gambling Policy, all of which together form the complete framework governing your relationship with the Platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
918kss collects personal data across several categories, depending on the stage of your interaction with the Platform:
| Category | Data Items Collected | Collection Trigger |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, phone number, residential address, username, password (hashed) | Account registration |
| KYC Identity Data | Malaysian NRIC / MyKad scan, passport copy, selfie for liveness check, proof of address document | First withdrawal request or enhanced due diligence trigger |
| Financial & Payment Data | Deposit / withdrawal amounts, transaction timestamps, payment method identifiers (e-wallet IDs, bank account fragments), transaction reference numbers | Each deposit or withdrawal event |
| Gaming Activity Data | Game history, bet amounts, session durations, win/loss records, bonus participation history, responsible gambling tool usage | Ongoing platform use |
| Technical & Device Data | IP address, device type, operating system, browser type & version, screen resolution, time zone, session tokens | Platform access (automatic collection) |
| Communications Data | Support chat transcripts, email correspondence, complaint records, survey responses | Customer support interactions |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channels, bonus participation history | Account settings and marketing interactions |
918kss collects personal data through the following channels and mechanisms:
918kss processes your personal data for the following defined purposes, each of which is tied to a specific legal basis described in Section 6:
918kss processes personal data under the following legal bases, applied in accordance with applicable international data protection standards:
918kss does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following defined circumstances, and only to the minimum extent necessary for each purpose:
918kss retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any mandatory minimum retention periods imposed by our licensing obligations or applicable law. The general retention framework applied by 918kss is as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of active account + 5 years following account closure | Licensing obligation / AML regulatory minimum |
| KYC Identity Documents | 5 years from last account activity | Mandatory regulatory retention |
| Financial Transaction Records | 7 years from each transaction date | Anti-money laundering and financial record-keeping requirements |
| Gaming Activity Logs | 3 years from each session date | Legitimate interests (dispute resolution, regulatory audit) |
| Customer Support Records | 3 years from last interaction | Legitimate interests (complaint management) |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent-based processing |
| Technical / Server Logs | 12 months from creation | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using recognised industry-standard data destruction protocols. You may request early deletion of certain data categories subject to the conditions set out in Section 11 (Your Rights).
918kss implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
The 918kss Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session state between pages, and where you have consented, to support platform analytics and performance monitoring. The following cookie categories are used:
You can manage your cookie preferences at any time through the cookie settings panel accessible from the Platform footer. Withdrawing consent for non-essential cookies will not affect your ability to play or transact on the Platform.
As a player on the 918kss Platform, you hold a set of rights with respect to your personal data. These rights are enforceable by contacting us as described in Section 15. 918kss will respond to all verified rights requests within thirty (30) calendar days of receipt, or will notify you where a longer period is required and provide a reasoned explanation.
Request a copy of all personal data held about you by 918kss, together with information about how it is processed and for what purposes.
Request correction of inaccurate or incomplete personal data held in your account record. Certain corrections may require re-verification via KYC.
Request deletion of your personal data where it is no longer necessary for the original collection purpose — subject to mandatory regulatory retention requirements.
Request that processing of your data be restricted to storage only while a dispute regarding accuracy or lawfulness is being resolved.
Request a copy of your account data in a structured, machine-readable format (JSON or CSV) to transfer to another service, where technically feasible.
Object to processing of your personal data for direct marketing purposes at any time with immediate effect. Also applies to processing based on legitimate interests where you have compelling grounds.
To exercise any of these rights, please submit a written request to support@918kss.cam with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. We may need to verify your identity before processing the request.
918kss operates as an international online gaming platform, and certain data processing activities — including cloud infrastructure hosting, fraud detection, and KYC verification — may involve the transfer of personal data to servers or processors located outside Malaysia. Where such transfers occur, 918kss ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.
Safeguards applied for international data transfers include: contractual data processing agreements with all third-party processors incorporating standard data protection clauses; selection of hosting and processing providers that maintain recognised international security certifications (ISO 27001 or equivalent); and restriction of data sharing to the minimum scope necessary for each processing purpose.
Malaysian players should note that Malaysia's Personal Data Protection Act 2010 (PDPA) applies to the processing of personal data in commercial transactions conducted in Malaysia. 918kss processes data for Malaysian players with awareness of these obligations and endeavours to apply equivalent or higher standards in its data handling practices.
The 918kss Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is enforced through our mandatory KYC process, which requires submission of a valid Malaysian NRIC (MyKad) or passport for all accounts prior to withdrawal processing.
If 918kss discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age, we will take immediate steps to close the associated account and delete the personal data concerned, except where retention is required for regulatory reporting or fraud investigation purposes.
918kss reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where changes to this Policy are material — meaning they alter the categories of data collected, the purposes of processing, the parties with whom data is shared, or your rights as a data subject — we will provide advance notice via:
The effective date of the current version of this Policy is displayed at the top of this page. Continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to a revised Policy, you may close your account as described in the Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by 918kss, please contact our Data Protection team through the following channel:
We handle all privacy enquiries in strict confidence. Where a complaint cannot be resolved directly with 918kss, you retain the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction where 918kss holds its gaming licence.
See also: Terms & Conditions | Responsible Gambling Policy | FAQ
Have questions about your personal data, or want to exercise your data rights? Our support team is available around the clock to assist — or visit our FAQ for quick answers to common privacy questions.
21+ For players aged 21 and above only. Play responsibly. Gambling involves financial risk.