Privacy Policy 18win – Malaysia Member Data Protection

18win operates as a digital entertainment platform providing a wide range of online games to users in Malaysia. We understand that your trust is our most valuable asset, and that trust can only be built through transparency in every aspect of our operations — including how we handle your personal data.

This Privacy Policy applies to all registered members, website visitors, and anyone who interacts with the 18win platform through our website or mobile app. This policy explains:

• Types of personal information we collect from you.
• The purpose of data collection and use.
• Parties that may receive your data under limited circumstances.
• Data retention period and deletion procedures.
• Your rights as a data owner and how to exercise them.
• The technical security measures we use to protect your data.

If you are under 18 years of age, you are not permitted to register or use the 18win platform. We do not knowingly collect information from minors. Should we discover that data from a minor has been collected without our knowledge, it will be deleted immediately.

We collect several categories of information depending on your interaction with the platform. This includes information you voluntarily provide during registration, as well as information collected automatically while you use our services.

We do not collect sensitive information such as medical records, biometric data, or financial information beyond what is required for payment processing and identity verification. Every piece of information collected has a clear and legitimate purpose.

Every piece of information we collect is used for specific, legitimate, and transparent purposes. We will not use your data for any other purpose without obtaining your consent first. The following are the primary purposes of data use at 18win:

• Account management – to create, maintain, and protect your account on the 18win platform.
• Transaction processing – to process deposits, withdrawals, and other financial activities safely and accurately.
• Identity verification (KYC) – to ensure compliance with legal requirements and to prevent money laundering.
• Customer Support – to respond to enquiries, resolve technical issues, and provide effective assistance.
• Platform security – to detect and prevent fraud, hacking, or suspicious activity.
• Service improvement – to analyse usage patterns in order to enhance the user experience.
• Legal compliance – to fulfil applicable legal and regulatory obligations.
• Marketing communications – to send promotional information and exclusive offers, subject to your subscription preferences.

18win takes a highly cautious approach to sharing your personal data. We only share data in limited and necessary circumstances. The following are situations where your data may be shared:

• Payment providers – information required to process financial transactions is shared with trusted and registered payment gateway providers.
• Game software providers – the minimum data required to run games is shared with our game providers.
• Cloud and computing services – data is stored on secure servers managed by infrastructure providers that meet international security standards.
• Legal authorities – we may be required to disclose data to authorities if mandated by a valid court order or legal regulation.
• Fraud Investigation – in cases involving fraud or security threats, relevant data may be shared with the appropriate authorities.

All third parties receiving your data are bound by legally enforceable confidentiality agreements and are required to implement data protection standards equivalent to or higher than our own.

The 18win platform uses cookies and similar tracking technologies to enhance the user experience and ensure smooth platform operation. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies – required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies – helps us understand how users interact with the platform so we can improve the experience. Data is collected in aggregate and without individual identification.
• Functional cookies – stores your preferences such as language, location, and other settings to make returning to the platform more convenient.
• Marketing cookies – used to display more relevant advertisements based on your interests. You may opt out of these cookies.

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality. We recommend keeping the default cookie settings for the best platform experience.

Your data security is the highest priority at 18win. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

Key security measures we implement:

• 256-bit SSL/TLS Encryption – all data transmitted between your device and our servers is fully encrypted.
• Two-factor authentication (2FA) – an additional security layer is available to protect your account from unauthorised access.
• 24/7 Monitoring – our security team continuously monitors the infrastructure to detect and respond to threats promptly.
• Secure data imaging – data backups are performed regularly and stored in separate, secure locations.
• Regular security audits – we conduct regular penetration testing and security audits by independent third parties.
• Role-based access control – internal staff only have access to data required for their specific tasks.

While we take all reasonable measures, no system can be guaranteed 100% secure. Therefore, you also play an important role in protecting your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

18win retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law. Once the data is no longer needed, it will be securely deleted or anonymized.

• Active account data – retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Transaction records – retained for 7 years as required by Malaysia's financial and taxation regulations.
• KYC Documents – retained for 5 years after account verification or closure.
• Communication logs – retained for 2 years for dispute resolution and service improvement purposes.
• Technical data and server logs – retained for 90 days for security and technical troubleshooting purposes.

As a 18win member and owner of your personal data, you have the following rights, which we fully respect. You may exercise any of these rights by contacting our customer support team:

We will respond to all data rights requests within 30 business days. In more complex cases, this period may be extended to 60 days with prior notification to you. No fees are charged for exercising your rights, except in situations where requests are repetitive or unreasonable.

18win reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant amendments will be communicated to you via in-platform notification or email at least 14 days before taking effect.

Continued use of the 18win platform after the effective date of any amendment constitutes your acceptance of the revised policy. We encourage you to review this page periodically so you remain informed about how we protect your information.

The "Last Updated" date displayed at the top of this page indicates when this Privacy Policy was last reviewed. Previous versions of the Privacy Policy may be requested through customer support if needed.

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you.

We are committed to resolving your concerns in a fair and transparent manner. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.