1Introduction
18j ("we", "our platform") takes seriously its responsibility to protect the privacy and personal data of every user who registers and uses our services in Malaysia. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.
This document explains in detail what information we collect from you, how it is used, who it may be shared with, and what rights you have as a user regarding that data. By registering or using the 18j, you agree to the terms set out in this Privacy Policy.
This Privacy Policy applies to all services of 18j including our website, mobile app, and all official communication channels. In the event of any conflict between other language versions and this version, the Bahasa Melayu version shall prevail for users in Malaysia.
2Information We Collect
We collect various types of information depending on how you interact with the platform 18j. Generally, there are two main categories:
A. Information You Provide Directly:
- Full name as stated on your MyKad or Malaysian passport
- Date of birth for age verification (18 years and above)
- Active Malaysian phone number
- A valid and active email address
- Malaysian bank account number for fund withdrawal purposes
- Copy of identification document (front and back of MyKad) during the KYC process
- Information you provide when contacting our customer support
B. Information Collected Automatically:
- Device IP address and approximate location based on IP
- Device type, model, operating system and web browser version
- Session data including login time, session duration and in-platform activity
- Game history, total wagering amount, wins and losses
- Complete deposit and withdrawal transaction records
- Cookie data and similar tracking technologies (see Section 5)
| Data Category |
Example |
Primary Purpose |
| Identity |
Name, date of birth, MyKad |
KYC & age verification |
| Contact |
Email, phone number |
Communication & account security |
| Financial |
Bank account number, transaction history |
Payment processing |
| Technical |
IP, device, browser |
Security & product improvement |
| Games |
Betting history, sessions |
Compliance & responsible gaming |
3How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. 18j does not use your data for purposes not stated without first obtaining your consent.
- Verify your identity during registration and the mandatory KYC process
- Securely process deposits, fund withdrawals and other financial transactions
- Provide access to all games and services on the platform 18j
- Send important notifications related to your account, security and transactions
- Detect and prevent fraud, money laundering and suspicious activity
- Fulfil applicable legal and regulatory compliance obligations
- Support responsible gaming programmes including detection of at-risk gaming patterns
- Improve the user experience through aggregated and anonymised data analysis
- Send promotional offers and product updates — only if you have agreed to receive marketing communications
18j will not use your game history data to make credit, insurance, or any other decisions that could affect your rights outside of this platform.
4Sharing Information with Third Parties
18j does not sell your personal data. However, in the normal operation of the platform, there are situations where your information may need to be shared with certain parties:
- Payment service providers — such as FPX, DuitNow, Touch 'n Go, Boost, and GrabPay, to securely process your financial transactions
- Third-party game providers — such as Pragmatic Play, Evolution Gaming, and Microgaming, which require basic session information to run games
- Cloud and hosting service providers — who store and process data on our behalf under strict data processing agreements
- Authorities and law enforcement agencies — when required by law, court order, or official investigation
- Audit and compliance companies — for financial audit and regulatory compliance purposes only
All third parties who receive your data are bound by strict confidentiality agreements and may only use that data for the specified purposes. 18j is not responsible for the privacy policies of third parties that operate independently outside our control.
5Cookies & Tracking Technologies
Platform 18j uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. There are three main types of cookies we use:
- Essential Cookies — Required for core platform functions such as Login, active sessions, and account security. These cookies cannot be disabled without affecting platform functionality
- Performance & Analytics Cookies — Collects aggregated data on how users interact with the platform to help us improve our products and user experience
- Preference Cookies — Stores your preferences such as interface language, display settings, and game preferences for convenience in future sessions
You can manage or disable cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain features within the 18j. Platform-level cookie settings can also be managed through the "Privacy & Settings" section in your account.
6Data Security
18j continuously invests in robust security infrastructure to ensure your personal data is always protected. The security measures we implement include:
- Data encryption in transit using TLS 1.3 protocol and data encryption at rest using AES-256
- Two-factor authentication (2FA) is available for all member accounts as an additional layer of protection
- 24/7 system monitoring with automated intrusion detection
- Strict internal access controls — staff 18j may only access the data required for their specific job responsibilities
- Periodic security audits by independent third parties to identify and address any vulnerabilities
- A comprehensive incident response plan — in the event of a data breach, we will notify affected users within 72 hours
While we apply the best security measures available, no online system can be guaranteed 100% secure. You also play an important role — make sure you use a strong password and never share your account login details 18j your data with anyone.
7Your Rights Regarding Personal Data
As a user 18j registered in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete data in your account.
Right to Erasure
Request the deletion of your personal data subject to legal obligations.
Right to Object
Object to the processing of your data for direct marketing purposes.
Right to Portability
Download your data in a machine-readable format (JSON/CSV).
Right to Restriction
Request a restriction on the processing of your data under certain circumstances.
To exercise any of the above rights, you may submit a request via our customer support live chat or official email. Requests will be processed within 14 business days. Identity verification may be required before your request is processed.
8Data Retention Period
18j retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.
| Data Type |
Retention Period |
Reason |
| KYC & identity documents |
5 years after account closure |
PDPA requirements & AML compliance |
| Financial transaction records |
7 years |
Accounting & tax requirements |
| Game history |
5 years |
Responsible gaming & audit |
| Support communication logs |
3 years |
References & dispute resolution |
| Technical log data |
12 months |
Security & troubleshooting |
| Analytics cookie data |
13 months |
Usage trend analysis |
Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be linked to your identity.
9Changes to This Privacy Policy
18j reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services.
- You will be notified of any material changes via your registered email or in-platform notification at least 14 days before taking effect
- The "Updated" date at the top of this page will always reflect the latest version
- Continued use of the platform after the effective date of any amendment is considered acceptance of the new terms
- If you disagree with any changes made, you have the right to close your account before the amendment's effective date
We encourage you to review this Privacy Policy page periodically. Previous versions of the Privacy Policy are available upon request via our support email for historical reference.
10Contact Us
If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team 18j ready to assist you.
- Live Chat — available 24/7 directly within the platform 18j for the fastest response
- Official Email — [email protected] (response within 1–2 business days)
- Written Complaints — for formal privacy complaints, please include your account details and a full description of the issue
Every privacy complaint received will be acknowledged within 48 hours and resolved within 30 business days. If you are not satisfied with our response, you have the right to escalate the complaint to the Department of Personal Data Protection Malaysia.
FAQ – Privacy Policy
18j will only disclose personal data to government authorities or law enforcement agencies when required by Malaysian law, a valid court order, or in the context of an official investigation into fraud or money laundering. We will not voluntarily disclose your data without a clear legal basis.
Yes, you may request the deletion of your personal data. However, certain data that we are legally required to retain under Malaysian law — such as financial transaction records (7 years) and KYC documents (5 years) — cannot be deleted even upon request. Other data not subject to legal retention obligations will be deleted within 30 business days after the request is confirmed.
18j uses a combination of local and international server infrastructure managed by high-grade cloud service providers. In all cases, cross-border data transfers are governed by data transfer agreements that comply with protection standards equivalent to or exceeding Malaysia's PDPA requirements. The security and integrity of your data is ensured regardless of the physical server location.
You can opt out of promotional emails at any time in two ways: (1) click the "Unsubscribe" link at the bottom of any promotional email from us, or (2) log in to your account and go to Settings → Notifications → turn off marketing communications. Changes will take effect within 48 hours. Please note that you will still receive important account and security-related emails even after unsubscribing from promotions.