Privacy Policy

This Privacy Policy ("Policy") describes how MYR918 ("Company", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("User", "Player", "you", "your") who access or use the MYR918 online gaming platform, including its website, mobile applications, and all associated digital services (collectively, the "Platform") accessible at myr918.cam.

MYR918 operates as an online entertainment platform, primarily serving players across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and surrounding regions. We are committed to handling personal data responsibly, lawfully, and in accordance with applicable data protection legislation.

By registering an account, accessing the Platform, or submitting personal information to MYR918 in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to request Account closure.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes name, email address, mobile number, IP address, device identifiers, and payment details.
• "Processing" — Any operation performed on personal data, whether by automated means or otherwise, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. MYR918 acts as Data Controller in respect of all personal data collected through the Platform.
• "Data Processor" — A third-party entity that processes personal data on behalf of the Data Controller, under contract and in accordance with the Controller's instructions.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer verification procedures, including identity and age checks required prior to withdrawal processing and in response to regulatory obligations.
• "Cookie" — A small text file placed on your device by a website or application, used to store information about your session, preferences, or behaviour on the Platform.

MYR918 is the Data Controller responsible for the personal data collected through and processed via the Platform. As Data Controller, MYR918 determines the purposes for which personal data is collected and the means by which it is processed.

Where MYR918 engages third-party service providers who process personal data on the Company's behalf — such as payment processors, identity verification services, fraud prevention tools, and customer support platforms — those parties act as Data Processors under written agreements that obligate them to process data only in accordance with MYR918's instructions and to implement appropriate security measures.

For all data protection enquiries, requests to exercise data subject rights, or concerns regarding this Policy, you may contact MYR918 at the details provided in Section 16 of this document.

MYR918 collects personal data through three primary channels: information you provide directly, data generated automatically through your use of the Platform, and information obtained from third parties with lawful authority to share it.

4.1 Data You Provide Directly

4.2 Data Generated Automatically

4.3 Data from Third Parties

MYR918 may receive personal data from third parties in the following circumstances:

• Identity and age verification service providers who confirm the validity of documents submitted during KYC.
• Fraud detection and anti-money laundering (AML) screening services that cross-reference identity details against sanctions lists and watchlists.
• Payment processors who confirm transaction status and flag potentially fraudulent payment activity.
• Responsible gambling organisations where a self-exclusion notification is issued that affects a Player's account eligibility.

MYR918 processes personal data only where a lawful basis exists. The applicable legal bases are:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your Account, process deposits and withdrawals, resolve support queries, and provide access to the gaming services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, responsible gambling obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing is carried out in pursuit of MYR918's legitimate business interests, including fraud prevention, network security, platform analytics, and the improvement of gaming services — provided that such interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent — for example, in relation to marketing communications or optional analytical cookies — you may withdraw that consent at any time by contacting us or via the account settings dashboard. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

MYR918 processes personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your registered account; processing login authentication; enabling password resets and two-factor authentication.
• Transaction Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, and card payments; processing and verifying withdrawal requests to verified payment instruments.
• Identity & Age Verification (KYC): Verifying that you are who you claim to be and confirming that you meet the minimum age requirement of 21 years before withdrawal privileges are activated.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other illegal conduct; monitoring transaction patterns for anomalies.
• Responsible Gambling: Monitoring gameplay patterns that may indicate problem gambling behaviour; administering deposit limits, session timers, cool-off periods, and self-exclusion requests; maintaining self-exclusion registers.
• Legal & Regulatory Compliance: Maintaining records required by applicable law; responding to regulatory enquiries, court orders, and lawful requests from competent authorities.
• Customer Support: Handling account queries, technical issues, payment disputes, and responsible gambling requests submitted via live chat, WhatsApp, or email.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how Players interact with the Platform and to guide product development priorities.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have consented to receive such communications. You may opt out at any time via account preferences or by contacting support.

MYR918 does not sell, rent, or commercially trade personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipient:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go, Boost, GrabPay, and cryptocurrency processing partners) receive transaction data necessary to execute deposits and withdrawals on your behalf.
• Identity Verification & KYC Partners: Third-party verification services receive document copies and identity particulars solely for the purpose of confirming identity and age.
• Fraud Detection & AML Screening Services: These services receive identity and transaction data for the purpose of sanctions screening and fraud risk assessment.
• Customer Support Platform Providers: Live chat and communication tools hosted by third-party SaaS providers may store support conversation data in accordance with their own data processing agreements with MYR918.
• Competent Legal Authorities: MYR918 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required by law, valid court order, or where MYR918 has a good-faith belief that disclosure is necessary to prevent imminent harm or illegal activity.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of substantially all of MYR918's assets, personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

MYR918 operates primarily in Malaysia and processes the majority of personal data within the territory. However, some third-party service providers engaged by MYR918 — including certain cloud infrastructure, customer support platform, and fraud detection providers — may be located in, or process data from, jurisdictions outside Malaysia.

Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that applicable in Malaysia, MYR918 implements appropriate safeguards, including:

• Execution of contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable in Malaysia.
• Selection of service providers located in jurisdictions recognised as providing adequate data protection under applicable law.
• Technical measures including end-to-end encryption for data in transit.

By using the Platform, you acknowledge and agree to the transfer of your personal data in accordance with the safeguards described above.

MYR918 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. Specific retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with MYR918's data destruction protocols.

MYR918 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and the MYR918 Platform is protected by 256-bit TLS/SSL encryption. This applies to all pages, including login, registration, deposit, and withdrawal screens.
• Encryption at Rest: Sensitive personal data stored on MYR918 servers — including payment details and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within MYR918's internal systems is restricted on a need-to-know basis. Access privileges are reviewed regularly and revoked promptly upon employee departure or role change.
• Two-Factor Authentication: MYR918 offers 2FA for all player accounts and requires it for privileged internal system access.
• Intrusion Detection: Our infrastructure is monitored 24/7 for anomalous access patterns, potential intrusions, and suspicious activity by automated systems and our security team.
• Penetration Testing: MYR918 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a data breach that is reasonably likely to result in harm to affected individuals, MYR918 will notify affected Players and relevant regulatory authorities in accordance with applicable law and without undue delay.

MYR918 uses cookies and similar tracking technologies on the Platform. These technologies enable essential Platform functionality, improve your user experience, and allow us to analyse how the Platform is used.

We use the following categories of cookies:

• Essential Strictly Necessary Cookies — Required for the Platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional Preference Cookies — Store your settings and preferences, such as your selected language, display preferences, and remembered login details (where you have enabled this feature).
• Analytics Analytics Cookies — Help us understand how Players navigate and use the Platform. Data collected is aggregated and anonymised. These cookies are only set with your consent.
• Security Fraud & Security Cookies — Used by our fraud detection infrastructure to identify unusual access patterns and protect accounts from unauthorised access.

You may manage cookie preferences via your browser settings. Most browsers allow you to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features including login and payment processing.

Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by MYR918:

To exercise any of these rights, please contact our data protection team via email at [email protected] or through the live chat support channel. We will respond to verified requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

We reserve the right to verify your identity before processing any data subject request. This is to ensure the security of your personal data and to prevent requests from unauthorised third parties.

The MYR918 Platform is intended solely for adults aged 21 years and above. MYR918 does not knowingly collect or process personal data from individuals under the age of 21.

If MYR918 becomes aware that personal data has been submitted by or on behalf of a minor — whether through misrepresentation during registration or otherwise — the relevant account will be immediately closed, all balances will be held pending investigation, and the personal data in question will be deleted to the extent not required to be retained by applicable law.

If you are a parent or guardian and believe that a person under your care has registered or attempted to register an account with MYR918, please contact us immediately at [email protected] so that we may take appropriate action without delay.

The MYR918 Platform may contain references to third-party services — including payment processors, game providers, and customer communication tools — whose own privacy practices and terms are independent of this Policy. MYR918 is not responsible for the data handling practices of third-party services accessed through or in connection with the Platform.

When you interact with a third-party service — for example, when completing a payment via Touch 'n Go eWallet, Boost, GrabPay, or your bank's FPX portal — you are subject to that service provider's own privacy policy and terms of use. We recommend reviewing the privacy documentation of any third-party service you use in connection with the Platform.

MYR918 does not control, endorse, or accept responsibility for the content, privacy policies, or practices of third-party services.

MYR918 reserves the right to amend, update, or replace this Privacy Policy at any time. The "Effective Date" displayed at the top of this page indicates when the most recent version of this Policy came into force.

Where amendments are material — particularly where they affect how personal data is used or the rights available to you — MYR918 will provide advance notice via the email address associated with your registered account or through an on-Platform notification. Minor amendments that do not materially affect your rights may be made without advance notice.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, please discontinue use of the Platform and contact us to discuss your options, including Account closure.

For all privacy-related enquiries, requests to exercise data subject rights, or concerns regarding this Privacy Policy, please contact MYR918 through any of the following channels:

• Email: [email protected] — Data subject requests and formal privacy complaints should be submitted in writing via email for a documented record. We aim to respond within 30 days.
• Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Mandarin. Live chat is suitable for general privacy questions and for directing you to the appropriate request channel.
• WhatsApp Support: Available around the clock for privacy-related queries in all three supported languages.

When submitting a data subject request, please include your full name, the email address associated with your MYR918 account, and a clear description of the right you wish to exercise or the concern you wish to raise. This information enables us to locate your records and respond promptly and accurately.