Ki918 Privacy Policy – Data Protection & Information Security

KI918 (hereinafter referred to as "we", "the platform", or "ki918") understands how important privacy is to every individual. We recognise that many Malaysian users today are increasingly aware of how their personal data is handled, and we fully respect that trust.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you provide when registering and using the ki918 platform. It applies to all users who access ki918.pro, the KI918 mobile app, and all related services we offer.

This policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to ensuring your data is managed with full integrity, transparency, and accountability. This policy may be updated from time to time — the latest revision date will always be displayed at the top of this page.

KI918 collects various categories of personal information depending on your interactions with our platform. This collection occurs during registration, during active platform use, and through automated technologies such as cookies and server logs.

Information You Provide Directly:

• Identity information: Full name, date of birth, gender, national identity card number (MyKad) or passport number.
• Contact information: Email address, mobile phone number, full mailing address.
• Financial information: Bank account number, bank name, digital wallet number, deposit and withdrawal transaction details.
• KYC documents: Copies of identity documents, bank statements, utility bills, and identity verification selfies.
• Account information: Chosen username, password (stored as an encrypted hash value), language preference, and account settings.

Automatically Collected Information:

• Technical data: IP address, browser type, operating system, screen resolution, and device information.
• Activity data: Pages visited, games played, session duration, clicks, and navigation patterns within the platform.
• Transaction data: Records of all deposits, withdrawals, wagering, and wins associated with your account.
• Location data: General location based on IP address for geographic verification and legal compliance purposes.
• Communications data: Records of live chat conversations, emails, and all communications with the ki918 support team.

Every piece of data we collect has a clear and legitimate purpose. ki918 does not use your personal data for any purpose unrelated to the services you use. The following are the primary ways we use your information:

Platform Operations and Account Management:

• Creating and managing your KI918 account, including identity verification during registration.
• Processing deposits and withdrawals securely through legitimate payment channels.
• Providing access to all games and platform features you are eligible to use.
• Managing VIP programs, bonuses, and promotional offers related to your account.

Security and Legal Compliance:

• Carrying out KYC (Know Your Customer) and AML (Anti-Money Laundering) processes as required by law.
• Detecting and preventing fraud, unauthorized activity, and multiple account usage.
• Complying with reporting and compliance requirements to the relevant regulatory bodies and authorities.
• Maintaining transaction records for audit and legal investigation purposes where required.

Service Improvement and Communication:

• Analyzing usage patterns to improve platform design, speed, and overall user experience.
• Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Providing better customer support based on records of previous interactions.
• Sending marketing and promotional communications where you have given consent to receive them — with the option to unsubscribe at any time.

Responsible Gaming:

• Monitoring gameplay patterns to identify signs of problem gambling and recommend appropriate protective measures.
• Enforcing deposit limits, betting limits, and cool-off periods that you set yourself within your account.
• Managing self-exclusion requests and ensuring they are enforced across all KI918 platforms.

KI918 understands that your trust depends on how we manage the information you share. We do not share your personal data except in the following circumstances required for platform operations and legal compliance:

Authorised Third-Party Service Providers:

• Payment providers: Transaction information is shared with authorized payment processors such as FPX, e-wallet providers, and banking institutions to complete your financial transactions.
• Game providers: Essential game data is shared with game software providers such as Pragmatic Play, Evolution Gaming, and other providers to deliver a seamless gaming experience.
• KYC Services: Identity information is shared with approved third-party identity verification platforms to complete the KYC process efficiently and securely.
• Infrastructure providers: Cloud service and server hosting providers that comply with high-grade data security standards.

All third-party providers we engage are required to comply with strict data confidentiality agreements and are not permitted to use your data for any purpose other than what has been agreed with ki918.

Legally Mandated Disclosure:

• To Malaysian government authorities when required by court order, summons, or valid legal provision.
• To regulatory bodies with jurisdiction over KI918's operations as part of licensing and reporting obligations.
• To the Financial Intelligence Unit (BNMLINK/BNM) or enforcement agencies in investigations of money laundering or terrorism financing activities where required.

KI918 continually invests in industry-grade security infrastructure to ensure your personal and financial data is protected at all times. We employ a defence-in-depth approach encompassing technical, operational, and organisational measures.

Technical Security Measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ki918's servers is encrypted using the latest industry-standard encryption protocols, ensuring no third party can intercept or read your data in transit.
• Hashed password: Your password is never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) with a unique random salt for each password.
• Two-factor authentication (2FA): You can and are strongly encouraged to enable 2FA to add an extra layer of protection to your account.
• 24/7 Security Monitoring: Our automated monitoring system detects unusual activity, suspicious login attempts, and abnormal transaction patterns in real time.
• Firewall and WAF: Our Web Application Firewall (WAF) protects the platform against cyber attacks such as SQL injection, cross-site scripting (XSS), and DDoS attacks.
• Data segregation: Member funds are held separately from KI918 operating accounts, protected by multiple layers of technical safeguards.

Access Control and Operating Procedures:

• Only authorised staff with a legitimate business need may access members' personal data, with access levels restricted according to their respective roles.
• All ki918 staff undergo background checks and regular data protection training.
• Periodic internal and external security audits are conducted by accredited independent parties to identify and address any vulnerabilities.
• Any security incident involving members' personal data will be handled in accordance with established incident response procedures, including notification to the relevant authorities and affected members where required.

KI918 does not retain your personal data longer than necessary for the purpose it was collected. Retention periods vary by data type and applicable legal requirements:

• Active account data: For as long as your account is active and for three (3) years after account closure, or longer if required by law.
• Financial transaction records: A minimum of seven (7) years from the transaction date, in line with Malaysia's financial reporting and tax legislation requirements.
• KYC documents: For as long as the account is active plus five (5) years after account closure, or as required by the relevant regulatory body.
• Security and access logs: Twelve (12) months from the log creation date for security investigation and digital forensics purposes.
• Support communication records: Two (2) years from the date of last interaction for quality control and complaint resolution purposes.
• Marketing data: Until you withdraw consent or request data deletion, whichever comes first.

When the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures. Anonymised data (where your identity can no longer be determined) may be retained for statistical and internal analytics purposes.

KI918 uses cookies and similar tracking technologies to enhance platform functionality, personalize your experience, and analyze website performance. Understanding the cookies we use helps you make more informed decisions about your privacy.

Types of Cookies We Use:

• Essential Cookies (Required): Required for core platform operations such as login session management, account security, and payment functions. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform to help us identify technical issues and improve the user experience. All data is collected in aggregate and anonymized form.
• Functional Cookies: Saving your preferences such as language, display settings, and favorite game history to make your experience smoother on future visits.
• Analytics Cookies: Used to understand overall usage patterns and help us plan meaningful platform improvements for our members.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling essential cookies may affect certain functions of the KI918 platform. For browser-specific guidance, please refer to your browser's help section.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection frameworks, you have certain rights regarding your personal data held by KI918:

To exercise any of the above rights, submit a request to our data protection team. We will process your request within 30 working days and may require identity verification beforehand to protect your account security. No charges apply for reasonable requests.

If you have any questions, concerns, or complaints regarding how KI918 handles your personal data, we encourage you to contact us directly. We are committed to resolving every complaint promptly and transparently.

• Data Protection Email: [email protected] (mark the subject as "Privacy Request" or "Personal Data Complaint")
• Live Chat 24/7: Available directly through the ki918.pro platform for immediate assistance
• Target Response Time: Within two (2) business days for general enquiries; within 30 business days for formal data subject rights requests.

If you are not satisfied with our response after raising a complaint directly, you have the right to escalate the matter to Malaysia's Department of Personal Data Protection or the relevant authority with jurisdiction over our platform.

KI918 takes all privacy-related complaints seriously and will thoroughly investigate each case before providing a comprehensive response.