i1918 Privacy Policy

1. Introduction

i1918 ("we", "us", "our") operates the online gaming platform accessible at i1918.app. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective members, and general visitors.

This Privacy Policy ("Policy") sets out the categories of personal data we collect, the purposes for which we process that data, the legal bases underpinning our processing activities, and the rights available to you as a data subject. This Policy applies to all personal data collected through i1918.app, its subdomains, and any related customer communication channels.

By registering an i1918 account or otherwise using the platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions.

2. Categories of Personal Data We Collect

i1918 collects the following categories of personal data in the course of operating the platform:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, nationality, government ID number (MyKad, passport)	Mandatory (KYC)
Contact Data	Email address, mobile phone number, residential address	Mandatory
Financial Data	Bank account details, eWallet identifiers (Touch 'n Go, Boost), transaction history, deposit/withdrawal records	Mandatory
Technical Data	IP address, device identifiers, browser type, operating system, session tokens	Automatic
Usage Data	Pages visited, games played, bet history, session duration, login timestamps	Automatic
Communications Data	Live chat transcripts, support email content, feedback submissions	When provided
Verification Documents	Copies of identity documents and proof of address submitted for KYC	Mandatory (KYC)

i1918 does not intentionally collect special category data (such as health data, biometric data, or racial/ethnic origin data) unless this is directly necessary for regulatory compliance purposes and we have a lawful basis for doing so.

3. How We Collect Personal Data

i1918 collects personal data through the following means:

• Direct provision by you — when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or update your account profile;
• Automated technical collection — through cookies, server logs, and analytics tools that record how you interact with i1918.app;
• Third-party sources — identity verification service providers, payment processors, fraud prevention databases, and gaming industry regulatory databases where we are permitted by law to obtain and use such data.

4. Legal Basis for Processing

i1918 processes personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity — processing required to register your account, execute deposits and withdrawals, and provide the platform services you have contracted for;
• Legal obligation — processing required to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, tax reporting obligations, and gaming licence conditions;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve the i1918 platform;
• Consent — processing for optional marketing communications, where you have provided a specific and informed consent that you may withdraw at any time.

5. How We Use Your Personal Data

i1918 uses the personal data we collect for the following purposes:

• To create, manage, and operate your i1918 player account;
• To process deposits and withdrawals, including verification of payment instrument ownership;
• To conduct identity verification and age verification as required by our gaming licence obligations — this is mandatory for all players, including those based in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To monitor account activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour;
• To provide customer support through our 24/7 live chat and email channels;
• To send account-related transactional communications such as deposit confirmations, withdrawal notifications, and security alerts;
• To send promotional communications where you have consented to receive them — you may opt out at any time;
• To comply with applicable laws, gaming licence conditions, and requests from regulatory authorities;
• To improve the performance, security, and content of the i1918 platform through internal analytics.

6. Data Sharing & Disclosure

6.1 Service Providers. i1918 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (including eWallet providers such as Touch 'n Go and Boost), identity verification providers, gaming software licensors, cloud hosting providers, and customer support platform vendors. All service providers are bound by contractual data processing obligations that restrict their use of personal data to the specific purpose for which it was shared.

6.2 Regulatory Authorities. i1918 may be required to disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where we are compelled to do so by applicable law or valid legal process.

6.3 No Sale of Data. i1918 does not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their own marketing or commercial purposes.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by i1918 may be transferred to the acquiring entity, subject to the acquiring entity assuming the obligations of this Policy.

7. Cookies & Tracking Technologies

i1918.app uses cookies and similar tracking technologies to operate the platform and improve the player experience. The categories of cookies used are:

• Strictly necessary cookies — required for platform functionality including session management and login state. These cannot be disabled;
• Performance cookies — used to collect anonymised usage data to help us understand how players use the platform and where improvements can be made;
• Functional cookies — used to remember your preferences such as language settings and preferred game lobby view;
• Analytics cookies — used for internal reporting on platform traffic and engagement patterns.

You may manage cookie preferences through your browser settings. Disabling certain cookies may impair the functionality of the i1918 platform.

8. Data Retention

i1918 retains personal data for the periods set out below, or longer where required by applicable law:

• Account and identity data — retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements;
• Transaction and financial data — retained for a minimum of 7 years in compliance with applicable financial record-keeping obligations;
• KYC verification documents — retained for the duration of the account and for 5 years following account closure;
• Communications data — retained for up to 3 years from the date of the communication;
• Technical and usage data — typically retained for up to 24 months from collection.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Data Security

i1918 implements technical and organisational security measures appropriate to the risk profile of personal data processing, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and i1918.app;
• Encryption of sensitive personal data fields at rest in our database infrastructure;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of the platform infrastructure;
• Two-factor authentication requirements for administrative access to systems holding personal data;
• Incident response procedures for detection, containment, and notification of personal data breaches.

While i1918 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your i1918 login credentials.

10. Your Data Rights

As a data subject, you may have the following rights in respect of your personal data held by i1918, subject to applicable law and regulatory exceptions:

• Right of access — to request a copy of the personal data we hold about you;
• Right of rectification — to request correction of inaccurate or incomplete personal data;
• Right of erasure — to request deletion of personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations;
• Right to restrict processing — to request that we temporarily limit how we use your personal data in certain circumstances;
• Right to data portability — to receive a structured copy of personal data you have provided to us in a machine-readable format;
• Right to withdraw consent — to withdraw consent for processing activities based solely on consent, such as marketing communications, at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the i1918 Data Protection team via live chat on i1918.app or by email at [email protected]. i1918 will respond to verified requests within 30 days.

11. Children's Privacy

i1918 is an adult gaming platform. Access is strictly restricted to individuals who are 21 years of age or older. i1918 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will immediately close the associated account and delete the relevant data.

12. International Data Transfers

i1918 may transfer personal data to, and store personal data on, servers located outside Malaysia, including in jurisdictions where data protection laws may differ from those in force in Malaysia. Where such transfers occur, i1918 implements appropriate safeguards — including contractual data transfer mechanisms — to ensure that the transferred data receives a level of protection consistent with this Policy and applicable data protection law.

13. Changes to This Policy

i1918 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players via a platform notification or email prior to the changes taking effect. The "Last Updated" date at the top of this document will reflect the date of the most recent revision. We encourage you to review this Policy periodically.

14. Contact Information

For questions, concerns, or requests relating to this Privacy Policy or our personal data practices, please contact us via:

• Live chat: Available 24/7 at i1918.app
• Email: [email protected]

i1918 aims to respond to all privacy-related enquiries within 5 business days.