18bba Privacy Policy and Data Protection

Introduction

18bba respects the importance of privacy and aims to handle personal information fairly, securely and transparently. This policy applies when an individual visits the 18bba website, creates or uses an account, places a casino or sports wager, completes a payment, communicates with support or uses another available feature.

By using 18bba, you acknowledge that information may be processed as described in this policy. Where consent is required for a particular activity, 18bba will request it separately. Refusing optional processing will not normally prevent basic access, although declining information required for identity, payment or security checks may mean that an 18bba service cannot be provided.

Scope and Definitions

In this Privacy Policy, “18bba”, “we”, “us” and “our” refer to the 18bba website and associated services. “User”, “player” and “you” refer to a visitor, account holder or person who contacts 18bba. “Personal information” means information that identifies or can reasonably be connected with an individual.

Personal information may include direct identifiers, account records, payment details, gaming activity, device information and communications. It may also include conclusions generated from account behaviour, such as a fraud indicator, security alert or responsible gambling risk signal. Anonymous or aggregated statistics that cannot reasonably identify a person are not treated as personal information under this 18bba policy.

This policy concerns information controlled by 18bba. Malaysian banks, card issuers, e-wallet operators and telecommunications providers may process information under their own terms when a user accesses their independent services.

Information Collected

Registration and identity information

When an account is created, 18bba may collect a full name, date of birth, username, residential address, nationality, email address, mobile number and preferred currency. Identity verification may require a government-issued document, a recent address record, a photograph or other evidence reasonably needed to confirm that the account belongs to an eligible adult.

Account and gaming information

18bba may record login history, account preferences, bonuses, deposits, withdrawals, casino sessions and sports wagers. Betting data may include EPL or Liga Super Malaysia selections, odds, stake amounts, results and settlement records. Casino records may include game titles, MYR stakes, session timing and outcomes.

Technical and communication information

When a person accesses 18bba, technical records may include an IP address, browser type, operating system, device identifier, language, approximate location, access time and diagnostic events. If a user contacts 18bba support, we may retain the message, account reference, attachment and response needed to address the enquiry.

Purposes of Data Processing

18bba processes personal information only where there is an appropriate operational, contractual, security, consent-based or legal reason. Depending on the context, information may be used to:

• create, administer and secure an 18bba account;
• confirm age, identity, address and payment ownership;
• accept, settle and record casino or sports betting activity;
• process MYR deposits, withdrawals, refunds and related enquiries;
• detect account misuse, fraud, collusion and suspicious transactions;
• provide customer support and resolve payment or account disputes;
• apply deposit limits, cooling-off periods and self-exclusion instructions;
• maintain 18bba performance, security and service reliability;
• send operational notices concerning an account or material policy change; and
• meet record-keeping, responsible gambling and compliance requirements.

18bba may analyse activity to identify unusual access patterns or possible harm. Automated signals can assist a review, but important restrictions may also receive human assessment where appropriate. A risk alert does not automatically mean that a user has acted improperly.

Payments, KYC and Financial Information

When a user chooses DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong or another supported method, 18bba may process the account holder's name, payment route, transaction reference, currency, amount, status and time. Full card credentials may be handled by an authorised payment processor rather than stored directly by 18bba.

KYC and security reviews may require evidence showing that a payment method belongs to the registered 18bba user. Sensitive information not required for a review should be concealed where instructions permit. Users must never send a password, PIN or one-time authorisation code to 18bba support.

Financial records help 18bba reconcile RM transactions, investigate chargebacks, prevent unlawful activity and respond to account enquiries. A withdrawal may be paused while identity or payment ownership is verified. This safeguard protects both the user and the integrity of 18bba services.

Cookies, Analytics and Device Data

18bba may use cookies or similar local technologies to maintain a secure session, remember language choices, balance website traffic and detect suspicious activity. Essential technologies are required for functions such as login continuity and protection against unauthorised requests.

Performance information may show how pages load on mobile devices in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam without requiring 18bba to know a user's precise address. Aggregated data helps identify slow pages, broken controls and device compatibility issues.

Browser settings may allow users to delete or block certain cookies. Blocking essential storage can prevent 18bba login, security or preference features from working correctly. Where an optional technology requires consent, an appropriate choice should be presented before it is activated.

Disclosure and Information Sharing

18bba does not disclose personal information merely because it may have commercial value. Information may be shared with carefully selected service providers only when reasonably necessary to deliver, secure or administer 18bba services. Relevant recipients may include identity verification providers, payment processors, hosting services, security specialists, game-system operators and professional advisers.

A recipient should receive only the information needed for its assigned purpose and must handle that information under appropriate confidentiality, security and data protection obligations. 18bba may also disclose information when required by a valid legal request, to protect users, to investigate suspected fraud or to establish and defend legal claims.

If a business reorganisation affects 18bba, relevant information may transfer as part of that transaction, subject to suitable safeguards. 18bba will not authorise a recipient to use transferred information for an unrelated purpose merely because a corporate change has occurred.

Security and Confidentiality

18bba applies proportionate administrative, technical and organisational measures to protect personal information. Measures may include encrypted transmission, restricted staff access, activity logging, network monitoring, access reviews, secure development practices and incident response procedures.

No online system can provide absolute security. Users contribute to 18bba protection by choosing a strong and unique password, securing their email account, keeping devices updated and signing out after using a shared device. Login details must not be shared with friends, family members or anyone claiming to represent support.

A user who notices an unfamiliar login, unexpected MYR transaction or unauthorised account change should contact 18bba promptly. We may temporarily restrict activity while the issue is investigated. A protective restriction does not determine fault and may be removed after the required review is completed.

Data Retention and Deletion

18bba retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable security, accounting, dispute, responsible gambling and record-keeping requirements. Different categories may have different retention periods.

Closing an 18bba account does not require immediate deletion of every record. Transaction histories, identity checks, self-exclusion instructions and dispute records may need to remain available after closure. Keeping a self-exclusion record can help prevent a restricted user from opening another 18bba account.

When retention is no longer justified, information should be securely deleted, anonymised or placed beyond routine operational use. Backup copies may remain for a limited period until they are overwritten through the normal 18bba backup cycle.

User Rights and Privacy Requests

Subject to applicable rules and reasonable identity verification, a user may ask 18bba for access to personal information, correction of inaccurate details or consideration of deletion, restriction or another available privacy right. A user may also withdraw consent where a processing activity depends specifically on consent.

A request should clearly describe the information or account concerned. 18bba may request evidence of identity to prevent personal records from being released to the wrong person. We may decline or limit a request where retention is required for security, legal claims, financial records or responsible gambling controls.

18bba aims to respond within a reasonable period. Complex requests, archived records or identity concerns may require additional time. If more information is needed, 18bba support should explain what is required without asking for a password or one-time code.

Age Restriction and Responsible Gambling Data

18bba is intended only for adults aged 21 and above. We do not knowingly permit an underage person to maintain an account. If 18bba reasonably suspects that a user is underage, access may be restricted while age verification is completed.

Responsible gambling information can include deposit limits, session reminders, cooling-off requests, self-exclusion records and communications about harmful play. 18bba uses this information to apply requested controls, assess relevant activity and reduce attempts to bypass a restriction.

Self-exclusion information is treated with care, but it cannot always be deleted on request because continued retention may be necessary to enforce the exclusion. Players should use only discretionary money, avoid chasing losses and stop if gambling begins to affect bills, savings, work or family life.

Policy Changes and Contact Us

18bba may revise this Privacy Policy when services, security practices, payment methods or legal requirements change. The effective date at the top of the policy indicates when the current version applies. Material changes may also be presented through an appropriate 18bba account or website notice.

Questions about this policy, personal information or a privacy request may be sent to 18bba support. The website email is displayed as plain text: [email protected]. Users should provide a concise explanation and an account reference where relevant, but must not include a password, PIN or one-time security code.

18bba may need to verify the identity of the person making a request before discussing account-specific information. This step is an important privacy safeguard and helps ensure that Malaysian player records are not disclosed to an unauthorised person.