Official Platform Document

Privacy Policy 18yo – Our Commitment to Protecting Your Personal Data

At 18yo, we understand that your trust begins with how we handle your personal data. This page explains in detail what we collect, why we need it, how it is stored securely, and the full rights you hold as a member of the 18yo platform.

Updated: January 2026 Bahasa Melayu (ms-MY) Malaysia
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysia Compliance
12 Sections
In This Document
Jan 2026
Latest Update
Malaysia
Jurisdiction
EN
Document Language
Core Privacy Commitments 18yo

Six core principles that guide how we handle every piece of information you entrust to 18yo

Bank-Grade Encryption

All personal data and financial transactions of 18yo members are protected with 256-bit SSL encryption — the same security standard used by leading banks such as Maybank and CIMB. Your data is never transmitted unencrypted at any stage.

No Sale of Data to Third Parties

18yo has never sold, rented, or traded members' personal information to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we are simply its responsible custodians.

Data Minimisation Principle

We only collect data that is strictly necessary to provide you with 18yo's services. There is no excessive or unnecessary data collection. Every category of data we collect has a clear and legitimate purpose as stated in this policy.

Full Control Over Your Data

You have the full right to access, correct, download, or request deletion of your personal data held by 18yo. Requests can be made at any time via email at [email protected] and will be processed within a reasonable timeframe.

Malaysia PDPA Compliance

The 18yo Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and comply with all applicable data protection laws in Malaysia to ensure your rights as a user are fully protected.

Immediate Breach Notification

In the unlikely event of a data security breach, 18yo is committed to notifying affected members within 72 hours and taking all necessary steps to address the situation swiftly and transparently.

Important Note Before Reading

By registering an account or continuing to use the platform 18yo, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully in its entirety. If you have any questions, please contact us at [email protected] before proceeding.

01Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how 18yo ("we", "platform", or "18yo") collects, uses, stores, protects, and in certain circumstances shares your personal information when you use our website and services at the 18yo.my domain.

This policy applies to all registered members, visitors to our website, and any party that interacts with the 18yo platform in any capacity. It forms an integral part of our Terms & Conditions comprehensive terms.

18yo respects and is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation in Malaysia. We believe that transparency in data handling is the foundation of genuine trust between our platform and every 18yo member.

This Privacy Policy is effective from 1 January 2026. All previous versions have been fully superseded by this document. The date of the latest update will always be displayed at the top of this page.

02Types of Personal Data We Collect

18yo collects your personal data across several categories depending on how you use our platform. The table below outlines each data category and the purpose for which it is collected:

Data Category Sample Data Status
Identity Information Full name, date of birth, IC/passport number Mandatory
Contact Information Email address, Malaysian phone number Mandatory
Financial Data Payment methods, deposit & withdrawal history Mandatory
Game Data Betting history, winnings, game preferences Automatic
Technical Data IP address, device type, web browser, general location Automatic
Communications Data Support chat records, emails to 18yo Preferences

We do not collect sensitive information such as biometric data, health information, or data relating to religious beliefs and political views, except in very specific circumstances and only with your explicit prior consent.

03How We Collect Your Personal Data

18yo collects your personal data through the following methods:

  • Account Registration: When you register a 18yo account, you provide your identity and contact information directly to us through the registration form.
  • Identity Verification (KYC): Where identity verification is required under anti-money laundering compliance, you may be asked to submit documents such as a copy of your MyKad or passport.
  • Financial Transactions: Every deposit and withdrawal made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks, or any other Malaysian bank generates a transaction record that is stored within the 18yo system.
  • Gaming Activity: Every action taken on the platform — such as bets placed, games tried, and interactions with dealers in Live Casino — is automatically recorded.
  • Automatic Technical Data: 18yo's servers automatically record technical information such as your IP address, device type, operating system, and web browser whenever you access our platform.
  • Cookies & Similar Technologies: 18yo uses cookies and similar tracking technologies as described in Section 9 of this document.
  • Support Communications: All interactions you have with the 18yo support team – whether via live chat or email – are recorded for quality control and dispute resolution purposes.

04How Your Personal Data Is Used

18yo uses the personal data we collect solely for the following legitimate and necessary purposes:

  • Account Management: To create, maintain, and manage your 18yo account, including the necessary identity verification process.
  • Service Delivery: To allow you to seamlessly access and enjoy all games on 18yo, including Pai Kang, Cash Mahjong, Bull Bull, Cash Rocket, and Live Andar Bahar.
  • Payment Processing: To process your deposits and withdrawals via your chosen Malaysian payment method, such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
  • Security & Fraud Prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or breaches of our terms that could compromise the security of the platform and its members.
  • Customer Support: To provide you with effective technical assistance and customer support whenever needed.
  • Legal Compliance: To fulfil our legal obligations, including Malaysia PDPA compliance requirements and applicable financial regulations.
  • Platform Improvements: To analyse aggregated usage patterns for the purpose of improving the user experience and developing better new features on 18yo.
  • Platform Communications: To send you important information about your account, policy updates, or 18yo promotions that you have consented to receive.

18yo does not use your data to make automated decisions that carry legal or similarly significant effects on you without meaningful human involvement in the process.

05Disclosure of Data to Third Parties

18yo takes great care when it comes to disclosing your personal data to other parties. We does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may only be shared in the following limited circumstances:

  • Licensed Payment Processors: Transaction information required for processing is shared with payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and the banking institutions involved in handling your deposits and withdrawals. All such providers are bound by strict data protection agreements.
  • Technical Service Providers: Service providers that assist 18yo in managing our technical infrastructure (such as cloud hosting and cybersecurity) may have limited access to your data within the bounds of strict service agreements. They are not permitted to use your data for any other purpose.
  • Legal Requirements: In cases where Malaysian authorities or law enforcement agencies issue a court order or lawful request requiring data disclosure, 18yo will comply to the extent required by law.
  • Protection of 18yo's Rights: Where necessary to protect the legitimate rights, property, or safety of the 18yo platform, our members, or the public from a serious and credible threat.

In all cases of data disclosure to third parties, 18yo ensures that appropriate confidentiality and data protection agreements are in place and that only the minimum necessary data is shared.

06Data Security Measures We Practise

The security of your personal data is 18yo's highest priority. We invest continuously in the latest security infrastructure and practices to ensure your data remains protected at all times. Our key security measures include:

  • 256-bit SSL Encryption: All data transmitted between your device and 18yo's servers is encrypted using the latest TLS protocol – the same standard used by Malaysian banking institutions.
  • Data-at-Rest Encryption: Personal and financial data stored in the 18yo database is encrypted at rest using the latest industry-standard encryption.
  • Strict Access Controls: Access to 18yo members' personal data is strictly restricted to staff who require it solely to carry out their official duties. All access is logged and monitored.
  • 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and respond to any suspicious activity or potential security threats.
  • Regular Security Testing: 18yo conducts regular penetration testing and security audits carried out by independent security experts.
  • Staff Training: All 18yo staff with access to personal data are required to complete comprehensive data protection training as a condition of employment, with refresher sessions conducted on a regular basis.

While we take all reasonable steps to protect your data, no security system is 100% foolproof. You also play a part in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.

07Data Retention Period

18yo retains your personal data only for as long as necessary for the purposes set out in this Policy, or as required by applicable law. Our general data retention guidelines are as follows:

  • Active Account Data: For as long as your 18yo account remains active, we retain all relevant data to ensure the continuous and complete delivery of our services.
  • Financial Records Data: Records of deposit, withdrawal, and betting transactions are retained for a minimum of seven (7) years from the date of the transaction, in accordance with Malaysian financial compliance requirements.
  • Identity Verification Data (KYC): Identity verification documents and records are retained for a minimum of five (5) years after account closure, in accordance with anti-money laundering requirements.
  • Communications Records Data: Communication records with the 18yo support team are retained for two (2) years for quality control purposes and to assist in resolving any disputes that may arise.
  • Technical Data (Logs): Technical logs such as server access records are retained for three (3) months for security and technical troubleshooting purposes.

Once a retention period has ended, your personal data will be deleted or anonymised in a secure and irreversible manner. Anonymised data may be retained for longer for aggregate statistical analysis purposes where it can no longer be used to identify you as an individual.

08Your Rights Regarding Personal Data

As a 18yo member, you have the following rights with respect to the personal data we hold about you, in accordance with Malaysia's PDPA and international best practices:

01
Right of Access

You have the right to request a copy of the personal data we hold about you in a readable format. Requests will be processed within 30 working days.

02
Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected promptly.

03
Right to Erasure

You may request the deletion of your data when it is no longer needed, subject to any legal retention obligations we are required to comply with.

04
Right to Restriction

In certain circumstances, you may request that 18yo restrict the processing of your data while a dispute or review is ongoing.

05
Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if required.

06
Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, submit your request by email to [email protected] specifying the type of right you wish to exercise, your account number, and the required identity verification details. We are committed to responding within 30 business days.

09Cookies & Tracking Technologies

18yo uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the 18yo platform. To delete existing cookies, you can use the "Clear Browser Data" function in your browser.

10Protection of Children's Data

The 18yo platform is intended solely for individuals who are 18 years and above only. We do not knowingly collect or process personal data of children under the age of 18.

If you believe a minor under the age of 18 has registered an account on 18yo without proper authorisation, please contact us immediately at [email protected]. We will treat this matter with the utmost seriousness and take appropriate action, including closing the account in question and immediately deleting all associated data once the breach has been confirmed.

Parents and guardians are encouraged to monitor their children's online activity and use appropriate parental control software to prevent unauthorised access to adult entertainment platforms such as 18yo.

11Changes to This Privacy Policy

18yo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or the services we offer.

You will be notified of any material changes to this Policy through:

  • A clear in-platform notification on 18yo when you first log in after the changes take effect.
  • Email notification sent to the email address registered to your 18yo account.
  • Updates the "Last Updated" date displayed at the top of this page.

Your continued use of the 18yo platform after any changes to this Policy take effect will be considered your acceptance of those changes. If you do not agree with the changes made, you have the right to stop using the platform and request account closure by contacting our support team.

We encourage you to review this Privacy Policy page periodically – at least every few months – to stay informed about how we protect your personal data.

12Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 18yo handles your personal data, please do not hesitate to get in touch. Our dedicated team is ready to assist you:

  • Email: [email protected] – For all enquiries relating to data privacy and the exercise of your rights.
  • Live Chat: Via the live chat function within the 18yo platform, available 24 hours a day, 7 days a week.

When contacting us regarding privacy matters, please include the following to help us expedite the process: your 18yo account number, the nature of your request or complaint, and any relevant additional information. We are committed to responding to all data privacy enquiries within 5 business days and resolving more complex requests within 30 business days.

If you are not satisfied with our response after going through the internal complaints process, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP) for further investigation under the provisions of PDPA 2010.

Related Documents
❓ Privacy Policy FAQs 18yo

Answers to the most frequently asked questions from 18yo members on privacy and data protection

No, absolutely not. 18yo does not sell, rent, or share members' personal data with any advertisers or third parties for marketing purposes. Your data is only shared with payment providers who process your transactions (such as Touch 'n Go, DuitNow, and Malaysian banks), technical service providers who assist in operating our platform under strict confidentiality agreements, and Malaysian authorities when required by law. Your data is not used for any other commercial purpose.

To request a copy of your personal data, email [email protected] with the subject line "Data Access Request", including your 18yo account number and a copy of your identification document for identity verification. Our team will process your request within 30 business days and deliver the data in a readable format. No charges apply for the first request within any 12-month period.

When you close your 18yo account, we retain your data for the minimum periods required by law — typically seven years for financial records and five years for KYC records after account closure. These are legal obligations we are not able to waive. Once the retention period expires, your data will be securely deleted or anonymised. Data not subject to any legal retention requirement will be deleted within 90 days of account closure.

No. 18yo does not store your credit or debit card numbers. All payments are processed directly through licensed payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX network. Sensitive financial information flows exclusively between you and the relevant payment provider. 18yo only receives and retains transaction confirmation details required for your account records.

To request the deletion of your account and data, contact us by email at [email protected] or via the 18yo platform's live chat. Please state your request clearly along with your account number. We will first verify your identity, then process the account closure and delete any data not subject to legal retention requirements within 90 days. Data that must be retained under applicable law will remain securely stored until the minimum retention period has elapsed.

If you suspect your 18yo account has been accessed without your authorisation, take the following steps immediately: first, change your account password right away; second, contact the 18yo support team via live chat or email at [email protected] to report the incident and request a review of your account activity; third, check your email for any suspicious login notifications. The 18yo security team will promptly investigate and take all necessary steps to protect your account and funds.
Your Data Is Safe with 18yo

Play with Peace of Mind at 18yo – Your Privacy Is Our Priority

Now that you know how we safeguard your personal data, create your 18yo account with complete confidence. Enjoy Pai Kang, Cash Mahjong, Bull Bull, Cash Rocket, Live Andar Bahar, and more in a safe and responsible environment.

256-bit SSL Encryption  ·  No data sales  ·  Malaysia PDPA Compliance  ·  18 years and above only

Bahasa Melayu