Privacy Policy 18j – Protection Your Personal Data

The 18j platform, accessible via 18j.onl, takes seriously our responsibility to protect the privacy and personal data of every user. This Privacy Policy explains in detail how we handle the information you provide to us when using the platform, including our official website and mobile app.

By registering for or using 18j's services, you agree to the collection and use of information as described in this document. This Policy applies to all 18j platform users in Malaysia and should be read together with the Terms and Conditions us.

18j collects several categories of information from users depending on how you interact with our platform. The following is a summary of the types of data we collect:

We only collect data that is strictly necessary for the stated purposes. No sensitive information such as passwords is stored in plain text – all passwords are encrypted using a secure hashing algorithm.

The information we collect is used for the following purposes only. We will not use your data for any other purpose without obtaining your consent first:

• Account Management: Create, verify, and manage your account on the 18j platform.
• Transaction Processing: Process deposits, withdrawals, and all financial activity in your account securely and accurately.
• Identity Verification (KYC): Meet legal requirements for verifying user identity to prevent fraud and money laundering.
• Customer Service: Help you resolve issues, answer enquiries, and provide effective technical support.
• Platform Security: Detect and prevent fraudulent activity, multiple account usage, and other security breaches.
• Product Improvement: Analyse aggregated usage patterns to improve game quality and the overall user experience.
• Marketing Communications: Send information about the latest promotions and offers — only if you have agreed to receive such communications.
• Legal Compliance: Fulfil reporting obligations required by law and relevant authorities.

18j does not sell, rent, or trade your personal data to any third party for their marketing purposes. We only share information in the following limited situations:

• Trusted Service Providers: Companies that help us operate the platform, such as payment processing providers, cloud services, and identity verification companies — all bound by strict confidentiality agreements.
• Legal Requirements: If required by a court order, legal directive, or valid request from a Malaysian law enforcement agency.
• Fraud Prevention: Limited information sharing with identity verification service providers to detect and prevent fraudulent activity across platforms.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred — however, you will be notified in advance and your rights will be protected.

The 18j platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Gather information on how users interact with our platform to help us improve our services. All data is collected in an anonymised form.
• Preference Cookies: Save your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies: Used to understand traffic patterns and website usage for the purpose of continuous improvement.

You can control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the platform.

Your personal data is stored in secure data centres with strict physical and digital security controls. We implement multiple layers of protection to ensure the safety of your information:

• Data encrypted in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encrypted at rest using AES-256 encryption for sensitive information.
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• A comprehensive incident response plan to address any data breach swiftly and effectively.

Retention Period: We retain your personal data for as long as necessary to fulfil the purpose of collection or as required by Malaysian law. Financial transaction data is retained for a minimum of seven (7) years in compliance with statutory requirements.

Under Malaysia's PDPA and our own policies, you have the following rights regarding your personal data:

The 18j platform is intended exclusively for adult users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have unknowingly collected data from underage individuals, we will immediately take the following steps:

• Close and terminate the relevant account.
• Delete all related personal data from our systems.
• Return any funds held in the account in accordance with established procedures.

The 18j website may contain links to third-party websites such as payment providers or support platforms. This Privacy Policy applies to the 18j platform only.

We are not responsible for the privacy practices of third-party websites and encourage you to read their own privacy policies before providing any personal information. The presence of links to other websites does not imply our endorsement or recommendation of those sites.

18j reserves the right to update or modify this Privacy Policy at any time. When significant changes occur, we will:

• Update the "Last Updated" date at the top of this page.
• Display a clear notice on the platform's home page for a minimum of 7 days.
• Send email notifications to registered users when changes materially affect how we use personal data.

Your continued use of the 18j platform after any changes take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the bottom-right corner of the platform.
• Privacy Email: [email protected] (displayed as text only — please copy manually)
• Frequently Asked Questions: Visit page FAQ us for answers to common questions about privacy and account security.

Our privacy team will respond within two (2) business days for general enquiries, and within the legally prescribed timeframe for data rights requests. We are committed to resolving every enquiry transparently and responsibly.