KES918 Privacy Policy — Personal Data Protection for Malaysia Members

This Privacy Policy is published by the kes918 platform and applies to all registered members as well as users who browse or use kes918's services. kes918 acts as the data controller for personal information collected through this platform.

Kes918 is committed to protecting the privacy of every individual who interacts with our platform. We believe transparency is the foundation of trust — which is why we strive to explain clearly and plainly how your data is used, where it is stored, who can access it, and how long it is kept.

This Privacy Policy applies to all kes918 service channels, including the official website, mobile application (where available), email communications, and all customer support interactions. It does not apply to third-party websites or services that may be linked from the kes918 platform — we encourage you to review the privacy policy of each such website separately.

Kes918 collects several categories of personal data from members depending on the nature of their interaction with the platform. The types of data we collect are as follows:

Kes918 does not collect sensitive data such as health information, religious beliefs or political views. kes918 also does not collect biometric data such as fingerprints or facial scans.

Kes918 uses the personal data collected for the following legitimate and limited purposes:

• Account Management: Creating, managing and maintaining your kes918 account, including processing registration, identity verification, and account recovery where required.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and processing withdrawal of winnings to verified accounts.
• Gaming Services Provision: Enabling you to access and enjoy all kes918 games and services, including slots, poker, football, e-sports, Sports Betting, Live Casino and lottery.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account use, or any activity that violates kes918's Terms & Conditions.
• Legal Compliance: To fulfil statutory compliance obligations, including AML (Anti-Money Laundering), KYC (Know Your Customer), and reporting requirements prescribed under Malaysian law.
• Platform Improvements: Analysing usage patterns on an aggregate (not individual) basis to improve the design, functionality and user experience of the kes918 platform.
• Service Communications: Sending important notifications related to your account, transactions, policy updates, or security information that you need to know as a kes918 member.
• Customer Support: To assist in resolving enquiries, complaints, or disputes you have raised with the kes918 support team.
• Responsible Gaming Program: Monitors gameplay patterns to identify signs of problem gambling and offer appropriate assistance through the self-control tools provided by kes918.

Kes918 will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your separate consent.

Kes918 does not sell, rent, or disclose members' personal data to third parties for their own marketing or commercial purposes. However, kes918 may need to share necessary data with the following limited categories of third parties, only where required and for legitimate purposes:

• Payment Service Providers: Payment gateways processing Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX transactions receive only the minimum data required to process those transactions. All such providers are bound by strict confidentiality agreements with kes918.
• Game Providers: Game software providers may receive session data required to run games on a technical level. This data does not include your financial or contact information.
• Technology Service Providers: Companies that provide the technical infrastructure, hosting, cybersecurity, and support services that kes918 relies on. They access only the data required to carry out those technical functions.
• Relevant Authorities: kes918 will disclose personal data to Malaysian government authorities or law enforcement bodies when required to do so by law or a valid court order.

Kes918 implements a range of technical and organisational measures to protect members' personal data from unauthorised access, disclosure, alteration or destruction. The key safeguards kes918 employs include:

• 256-bit SSL Encryption: All communications between your device and kes918's servers are encrypted using TLS/SSL protocol with 256-bit keys — the industry standard for online data security.
• Tiered Access Controls: Only kes918 staff with a legitimate need and appropriate authorisation may access members' personal data. All access is logged and continuously monitored.
• Two-Factor Authentication (2FA): kes918 provides a two-factor authentication option for all member accounts as an additional layer of security to protect your account from unauthorised access.
• Continuous Security Monitoring: kes918's security monitoring system operates 24 hours a day to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: kes918 conducts regular security audits and penetration testing to identify and address potential vulnerabilities before they can be exploited.
• Secure Password Storage: kes918 members' passwords are stored as one-way hashes that cannot be decrypted — not even kes918 staff can view your password.

While kes918 takes all reasonable steps to protect your data, no online security system can guarantee absolute protection. kes918 encourages members to play an active role in securing their own accounts by using strong passwords, enabling 2FA, and never sharing login credentials with anyone.

Kes918 uses cookies and similar tracking technologies to enhance the user experience on the kes918 platform. The types of cookies kes918 uses are as follows:

• Essential Cookies: Required for core kes918 platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting the platform's key functionality.
• Preference Cookies: Stores user preferences such as language selection, display settings, and other preferences to improve your experience on the kes918 platform.
• Analytics Cookies: Collecting aggregated, anonymised data on how users interact with the kes918 platform to help us understand usage patterns and improve our services. This data is not used to identify any individual.
• Security Cookie: Used to detect suspicious activity, prevent fraud, and protect the security of kes918 members' accounts.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the kes918 platform and you may not be able to access all available features. For more information on managing cookies, please refer to your browser's help guide.

As a kes918 member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia:

To exercise any of the rights above, please contact kes918 via live chat or email at support@kes918.best. kes918 will verify your identity before processing any privacy rights request to ensure your data remains protected.

The kes918 platform is strictly for individuals aged 18 and above. kes918 does not knowingly collect personal data from children or minors under the age of 18.

If kes918 becomes aware or is notified that personal data belonging to a minor has been inadvertently collected, kes918 will take immediate steps to delete that data from our records and close any associated account without prior notice.

Kes918 retains members' personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations in Malaysia. General data retention guidelines are as follows:

• Active Account Data: Retained for the duration your kes918 account remains active, plus any additional period required by law following account closure.
• Financial Transaction Data: Retained for a minimum of seven (7) years from the transaction date in accordance with Malaysia's accounting and AML legal requirements.
• Technical Log Data: Retained for a limited period based on security and troubleshooting needs, typically between 90 days and one year.
• Support Communication Records: Retained for three (3) years for quality control and dispute resolution purposes.

When personal data is no longer required for any legitimate purpose, kes918 will delete or anonymise it in accordance with established secure procedures.

If you have any questions or concerns, or wish to exercise your privacy rights under this Privacy Policy, please contact the kes918 Privacy Officer through the following channels:

• Email: support@kes918.best (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 directly on the kes918 platform

Kes918 will endeavour to respond to all privacy-related enquiries within five (5) business days. For more complex enquiries or complaints, a longer timeframe may be required, and kes918 will keep you informed of progress throughout the process.

This Privacy Policy may be updated from time to time to reflect changes in kes918's practices, legal requirements or technology. kes918 will notify members of material changes via a notice on the platform or by email before the changes take effect. We encourage you to review this Privacy Policy periodically.