Privacy Policy
i1918 — Your Data, Our Responsibility

1 Introduction

This Privacy Policy ("Policy") describes how i1918 ("we", "us", "our", "the Platform"), operating the website at i1918.cam, collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Member", "the Player") who access or use the Platform in any capacity.

i1918 takes data privacy seriously. We process personal data only to the extent necessary to deliver our online casino and sports betting services, comply with applicable legal and regulatory obligations, and protect the legitimate interests of our Members and the Platform itself.

By registering an Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should cease using the Platform and contact our support team to close your account.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify an individual, whether directly (e.g., full name, NRIC number) or indirectly (e.g., IP address, device identifier).
• "Processing" means any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, i1918.
• "Data Processor" means any third party that processes personal data on behalf of i1918 under a contractual arrangement, such as payment service providers or KYC verification vendors.
• "Sensitive Data" means personal data warranting heightened protection, including government-issued identity document numbers (e.g., Malaysian NRIC), financial account details, and health or welfare information where disclosed in connection with responsible gambling requests.
• "Cookies" means small text files stored on your browser or device when you visit the Platform, used to facilitate session management, analytics, and personalisation.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal processing, involving the submission of documentary evidence of identity, age, and residential address.

3 Data Controller

i1918, the operator of the Platform at i1918.cam, acts as the Data Controller in respect of all personal data collected and processed through the Platform. Enquiries regarding this Policy or any aspect of our data processing practices should be directed to:

• Email: [email protected]
• Channel: 24/7 Live Chat via the Platform interface

Where i1918 engages third-party Data Processors (for example, payment gateway providers processing your Touch'n Go eWallet or DuitNow transactions), those processors act under contractual data processing agreements and are bound by obligations equivalent to those set out in this Policy.

4 Personal Data We Collect

i1918 collects the following categories of personal data during the course of providing its services:

4.1 Identity & Contact Information

• Full legal name;
• Date of birth (to verify compliance with the21+ age requirement);
• Malaysian NRIC number or passport number (for KYC verification);
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam);
• Mobile phone number;
• Email address.

4.2 Financial & Payment Information

• Bank account or e-wallet identifiers used for deposit and withdrawal transactions (e.g., Maybank account reference, Touch 'n Go eWallet ID, CIMB account details, DuitNow registered number);
• Transaction history — deposit amounts, withdrawal amounts, bonus credits, and bet records;
• Cryptocurrency wallet addresses where BTC or USDT transactions are made.

i1918 does not store complete card numbers, CVV codes, or full banking passwords. Payment processing is conducted by certified third-party payment service providers under their own security standards.

4.3 Account & Activity Data

• Username and hashed password;
• Login timestamps and session durations;
• Game history — titles played, bet amounts, winnings, and loss records;
• Sportsbook betting history — markets wagered on, including EPL, Liga Super Malaysia, UFC, and other events;
• Bonus claims, promotions activated, and wagering requirement progress;
• Responsible gambling settings — deposit limits, loss limits, and self-exclusion status;
• Customer support interaction records.

4.4 Technical & Device Data

• IP address and approximate geolocation derived from it;
• Browser type and version;
• Device type, operating system, and screen resolution;
• Referring URL and navigation path on the Platform;
• Cookie identifiers and similar tracking technologies as described in Section 10.

5 How We Collect Data

Personal data is collected through the following means:

• Directly from you: when you register an Account, complete your profile, submit KYC documentation, make a deposit or withdrawal, contact support, or activate responsible gambling tools;
• Automatically: through cookies, web server logs, and analytics tools when you browse or use the Platform;
• From third parties: identity verification service providers who confirm the authenticity of documents submitted during KYC; payment service providers who relay transaction confirmation data; fraud prevention and AML (Anti-Money Laundering) screening services.

6 Purposes & Legal Bases for Processing

The following table summarises the primary purposes for which i1918 processes personal data and the corresponding legal basis for each:

7 Data Sharing & Disclosure

i1918 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Personal data is shared only in the following circumstances and with appropriate safeguards in place:

7.1 Payment Service Providers

To process your MYR deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or cryptocurrency channels, we share relevant identity and financial data with our authorised payment gateway partners. These providers process data under their own regulatory frameworks and privacy policies.

7.2 KYC and Identity Verification Vendors

Third-party identity verification service providers receive copies of KYC documents (NRIC, passport, proof of address) solely for the purpose of authenticating your identity and confirming your age as21 or above. Documents are not retained by verification vendors beyond the period required to complete the check.

7.3 Fraud Prevention and AML Services

We may share transaction data and device identifiers with fraud screening and anti-money laundering compliance service providers to detect and prevent financial crime on the Platform.

7.4 Regulatory and Legal Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or in connection with an investigation into suspected illegal activity involving the Platform.

7.5 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of i1918's assets, personal data held by the Platform may be transferred to the successor entity, subject to equivalent privacy protections.

8 International Data Transfers

As an internationally operated platform, i1918 may process and store personal data on servers located outside of Malaysia. In such cases, we take reasonable steps to ensure that appropriate contractual or technical safeguards are in place to protect transferred data to a standard equivalent to the protections described in this Policy.

By using the Platform, Malaysian Members acknowledge and consent to the transfer of their personal data to servers or processors located in other jurisdictions, including the jurisdiction which i1918 holds its gaming licence.

9 Data Retention

i1918 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as summarised below:

• Active Account data: retained for the duration of the Account relationship and for a minimum of five years following Account closure, to meet anti-money laundering record-keeping obligations;
• KYC documents: retained for a minimum of five years following the last transaction, in line with standard AML compliance requirements;
• Transaction records: retained for a minimum of five years;
• Customer support records: retained for a minimum of two years from the date of the last interaction;
• Technical and device logs: typically retained for up to 12 months for security and analytics purposes, after which they are anonymised or deleted;
• Self-exclusion records: retained indefinitely to prevent re-registration during an exclusion period.

Upon expiry of applicable retention periods, data is securely deleted or irreversibly anonymised.

10 Cookies & Tracking Technologies

i1918 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use include:

• Strictly Necessary Cookies: required for session management, authentication, and core Platform functionality. These cannot be disabled without impairing your ability to use the Platform;
• Analytics Cookies: used to collect aggregated data on how Players navigate the Platform, helping us identifyability issues and improve the user experience. Data is anonymised where possible;
• Preference Cookies: used to remember your language, regional, or display preferences across sessions;
• Security Cookies: used to detect and prevent fraudulent or bot-driven activity.

i1918 does not use third-party advertising cookies to serve targeted advertisements on behalf of external advertisers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect Platform functionality.

11 Your Data Rights

i1918 respects your rights over your own personal data. Subject to applicable law and the Platform's legal obligations, you may exercise the following rights by contacting our support team: