Privacy Policy 18cash — Personal Data Protection for Malaysia Users

18cash takes every member's privacy seriously. This page transparently explains how we collect, process, store, and protect your personal data when you use our platform.

Last updated: 1 January 2026

18cash's Six Commitments to Your Privacy

Before reading the full policy, here is a summary of the data protection principles that form the core of our approach.

Top-Level Data Encryption

All data transmitted between your device and 18cash servers is protected by 256-bit SSL encryption. Sensitive information such as passwords is stored as an irreversible hash that cannot be decrypted.

No Sale of Data to Third Parties

18cash never sells, rents, or shares your personal data with third parties for marketing or commercial purposes. Your data is used solely for platform operational purposes.

Data Controls in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Requests can be submitted through our customer support team.

Local Legal Compliance

18cash operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data handling processes comply with applicable legal provisions in Malaysia.

Marketing Communications Control

You may choose to receive or opt out of marketing communications from 18cash at any time via your account settings. Important account-related notifications cannot be unsubscribed from as they are part of our core service.

Clear Data Retention Period

Your personal data is retained only for as long as necessary for the stated purposes or as required by law. After that, data is securely deleted or anonymized.

1Introduction and Scope of This Privacy Policy

This Privacy Policy describes how 18cash ("we", "Platform") collects, uses, discloses, and protects your personal information when you access or use our online betting platform, including the website at 18cash.vu and our official mobile app.

As a platform operating in Malaysia and serving local users, 18cash is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA). We view the protection of your personal data not merely as a legal obligation, but as part of the trust you place in us when you choose 18cash as your entertainment platform.

This Policy applies to all users who register an account, browse the platform without registering, or interact with any services provided by 18cash. By continuing to use this platform after reading this policy, you agree to the data handling practices described herein.

If you have any questions about how we handle your data that are not addressed in this policy, our customer support team is available to assist via 24/7 live chat.

2Types of Personal Data We Collect

18cash collects personal data from various sources depending on how you interact with our platform. Below is an overview of the types of data collected:

2.1 Data You Provide Directly

Data Type Example Information Requirements
Identity Information Full name, MyKad number, date of birth Required (KYC)
Contact Information Email address, phone number Required
Financial Information Bank account number, account holder name Required (Withdrawal)
Login Information Username, password (hashed) Required
Verification Documents MyKad copy, proof of address Required (KYC)

2.2 Automatically Collected Data

  • IP address, browser type, and device information used.
  • Login session data including time, duration, and approximate location.
  • History of betting activity and transactions within the platform.
  • Cookie data and similar tracking technologies (see Section 7).
  • Error logs and performance data for technical maintenance purposes.

3How We Use Your Data

18cash uses collected personal data solely for the following purposes. We will not use your data for any other purpose without first obtaining your consent:

  • Service Provision: Managing your account, processing deposits and withdrawals, and enabling access to all platform features.
  • Identity Verification (KYC): Verifying your identity to comply with legal requirements related to anti-money laundering and prevention of illegal financing.
  • Account Security: Detecting suspicious activity, preventing fraud, and protecting your account from unauthorized access.
  • Customer Support: Providing technical assistance and support services when you contact us.
  • Platform Improvements: Analyzing aggregated usage patterns (without identifying individuals) to improve the user experience.
  • Legal Compliance: Fulfilling legal obligations and complying with directives from relevant authorities.
  • Account-Related Communications: Sending important notifications related to your account, transactions, and security.
  • Marketing (With Consent): Sending promotional information and offers where you have consented to receive them.
We follow the principle of data minimization — we only collect data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data.

4Data Sharing and Disclosure to Third Parties

18cash does not sell or rent your personal data to any third party for commercial purposes. However, in the course of platform operations, your data may be shared in the following limited situations:

4.1 Trusted Service Providers

We work with third-party service providers that assist in platform operations — including payment processors, cloud service providers, and game software vendors. All these service providers are bound by strict data protection agreements and may only use your data for purposes specifically authorized by 18cash.

4.2 Legal Requirements

18cash may be required to disclose personal data to authorities if directed by a valid court order, law enforcement agency directive, or other applicable legal requirements in Malaysia. In such cases, we will only disclose the minimum necessary data and will notify you if permitted by law.

Your data will not be shared with any entity for advertising, partner marketing, or third-party analytics purposes that could identify you as an individual.

5Data Security Measures at 18cash

Your data security is our top priority. 18cash implements multiple layers of technical and organizational security to protect your personal data from unauthorized access, loss, misuse, or disclosure:

  • Data Encryption in Transit: All communication between your device and our servers is secured by TLS 1.3 protocol with AES-256 encryption.
  • Data Encryption at Rest: Sensitive data stored in our databases is encrypted using the latest industry standards.
  • Tiered Access Control: Only staff who require access to specific data to perform their duties are permitted to access that data.
  • Two-Factor Authentication (2FA): We offer 2FA for all member accounts to add an extra layer of security.
  • Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorized access attempts.
  • Regular Security Audits: We conduct regular security audits and penetration testing to identify and address any vulnerabilities.
While we take all reasonable measures, no security system is entirely foolproof. You are also responsible for keeping your password and account login credentials confidential.

6Your Rights Regarding Personal Data

As a user of the 18cash platform, you have the following rights regarding your personal data. To exercise any of these rights, please contact our customer support team via live chat:

Right of Access

You have the right to know what personal data we hold about you and to request a copy of it.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete data.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

We will process requests relating to the above rights within 14 working days from the date the request is received. Please note that the right to erasure may be limited in situations where we have a legal obligation to retain that data.

7Cookies and Tracking Technologies

The 18cash platform uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and provide essential functionality.

7.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as Login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymized data on how you use the platform to help us improve performance and design.
  • Functional Cookies: Storing your preferences such as language, display settings, and login information for your convenience.

7.2 Managing Cookie Settings

You can manage cookie settings through your web browser. Most browsers allow you to view, manage, block, or delete cookies via browser settings. Please note that blocking essential cookies may affect platform functionality and your Login experience.

8Children's Data Protection

The 18cash platform is strictly for individuals who are aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals below the applicable minimum age.

If you believe someone under the age of 21 has registered an account on our platform, please contact our support team immediately. We will take prompt action to review and close the account and delete all associated data.

Our KYC process is designed to verify the age of all members. Anyone who provides false information about their age is in violation of the platform's Terms and Conditions, and their account will be closed immediately upon detection.

9Amendments to This Privacy Policy

18cash reserves the right to update this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or the services we offer. When significant amendments are made, we will notify you via:

  • In-platform notifications while you are logged in to your account.
  • Email to the address registered with your account.
  • Updates the "Last Updated" date displayed at the top of this page.

Continued use of the platform after the effective date of an amended Privacy Policy constitutes acceptance of those amendments. If you disagree with any changes made, you have the right to close your account and request deletion of your personal data by contacting our support team.

10How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the 18cash customer support team:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the platform.
  • Email: [email protected] — we respond within 1 business day.

For data protection complaints not satisfactorily resolved by our team, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (JPDP), the authority responsible for overseeing PDPA compliance in Malaysia.

We value every piece of feedback and privacy-related inquiry. Our team is always ready to provide further clarification on any part of this policy.

Your Privacy is Protected — Play with Confidence at 18cash

Register today and enjoy a safe, fair, and personalized betting experience — your privacy is always protected with Malaysia's trusted platform.

Bahasa Melayu