Privacy Policy – satu918

1.Introduction

satu918 ("satu918", "we", "us", "our") operates the online gaming and sports betting platform accessible at satu918.co (the "Platform"). We are committed to safeguarding the personal information of our members and website visitors in accordance with applicable data protection principles and international gaming authority requirements.

This Privacy Policy describes how satu918 collects, processes, stores, and discloses personal data in connection with your use of the Platform and its associated services. By registering a member account or continuing to use the satu918 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2.Data Controller

For the purposes of applicable data protection law, satu918's operating entity — licensed under international gaming authority oversight — is the data controller responsible for your personal information collected through the Platform. Queries regarding data controllership may be directed to the satu918 support team via the contact details in Section 17.

3.Personal Data We Collect

satu918 collects the following categories of personal data from members and Platform visitors:

3.1 Registration Data. When you create a satu918 account, we collect your full name, date of birth, residential address, email address, and mobile phone number. This data is required to verify your identity and eligibility to use the Platform (including the 21+ age requirement).

3.2 Identity Verification Data. In compliance with KYC obligations under our international gaming authority license, satu918 may request copies of government-issued photo identification (such as a Malaysian identity card or passport), proof of residential address, and proof of payment method ownership.

3.3 Financial Data. satu918 collects transaction data including deposit amounts, withdrawal amounts, payment method identifiers (e.g., masked account numbers associated with Touch 'n Go eWallet, Boost, DuitNow, FPX, or bank accounts), and transaction timestamps. satu918 does not store full payment card numbers or e-wallet PINs.

3.4 Gaming & Betting Activity Data. satu918 records your game history, betting history, session durations, wagering amounts, and game outcomes. This data is used to manage your account, calculate winnings, resolve disputes, and fulfil responsible gaming obligations.

3.5 Technical & Usage Data. When you access the Platform, satu918 automatically collects your IP address, device type, operating system, browser type, referral URL, pages visited, and session duration. This data is collected via server logs and cookies (see Section 10).

3.6 Communications Data. satu918 retains records of communications between you and our support team, including live chat transcripts and email correspondence, for training, quality assurance, and dispute resolution purposes.

4.How We Collect Your Data

satu918 collects personal data through the following means:

• Directly from you — through the account registration form, KYC submission process, deposit and withdrawal requests, and support interactions;
• Automatically — through server logs, cookies, and session tracking technologies when you access the Platform;
• From third parties — from identity verification service providers, payment processors (including Touch 'n Go, Boost, and Malaysian banks), and fraud prevention agencies where necessary to fulfil our regulatory obligations.

5.How We Use Your Personal Data

satu918 processes your personal data for the following purposes:

• To create and manage your satu918 member account;
• To verify your identity and age eligibility in accordance with our 21+ policy and KYC obligations;
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method;
• To administer gaming, betting, and promotional activity on your account;
• To detect, investigate, and prevent fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions;
• To fulfil our responsible gaming obligations, including monitoring gaming behaviour for signs of problem gambling and applying account controls where appropriate;
• To provide customer support and resolve disputes;
• To send you transactional communications (account notifications, security alerts, withdrawal confirmations) and, where you have consented, promotional communications regarding satu918 offers;
• To improve the Platform through analysis of aggregated usage data;
• To comply with legal, regulatory, and licensing obligations.

6.Legal Basis for Processing

satu918 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered satu918 member, including account management, payment processing, and gaming service delivery;
• Legal obligation: Processing required to comply with our international gaming authority license, AML obligations, and applicable data protection law;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these interests are not overridden by your data protection rights;
• Consent: Processing of your data for direct marketing purposes, where you have provided explicit consent. You may withdraw marketing consent at any time without affecting other processing.

7.Data Sharing and Disclosure

satu918 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipient strictly as necessary:

• Payment processors and e-wallet providers (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and Malaysian banking institutions) to process your transactions;
• Identity verification and KYC service providers for the purpose of confirming your identity and age eligibility;
• Game and platform technology providers who require session or account data to deliver gaming services on the satu918 Platform;
• Regulatory and law enforcement authorities where satu918 is legally required to disclose information under applicable law, court order, or gaming authority directive;
• Fraud prevention agencies and AML service providers to detect and prevent financial crime.

All third parties who process personal data on behalf of satu918 are required to maintain appropriate technical and organisational security measures and may only use your data for the specified purpose.

8.International Data Transfers

satu918 operates under international gaming authority licensing and some of our technology and service providers may process data outside of Malaysia. Where data is transferred internationally, satu918 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to applicable data protection standards — to protect your personal information to the same standard as if it remained in Malaysia.

9.Data Retention

satu918 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and licensing obligations. In practice:

• Active account data is retained for the duration of your membership with satu918;
• Following account closure, satu918 retains identity, transaction, and gaming history records for a minimum of five (5) years in compliance with AML regulations and gaming authority requirements;
• Support communications are retained for a minimum of two (2) years;
• Technical and usage data (logs) are retained for up to twelve (12) months.

10.Cookies and Tracking Technologies

satu918 uses cookies and similar technologies to operate and improve the Platform. The types of cookies used include:

• Essential cookies: Required for Platform functionality, including maintaining your login session after satu918 login and enabling secure transactions. These cannot be disabled without disrupting Platform functionality;
• Analytics cookies: Used to understand how members interact with the Platform — including pages visited, session duration, and features used — in aggregate, anonymised form to guide product improvements;
• Preference cookies: Used to remember your display and language preferences across sessions.

satu918 does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to use the satu918 Platform.

11.Security Measures

satu918 implements a range of technical and organisational security measures to protect your personal data, including:

• 256-bit SSL encryption for all data transmission between your browser and satu918 servers;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Secure, encrypted data storage on access-controlled servers operated under international gaming authority standards.

12.Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by satu918:

• Right of access: You may request a copy of the personal data satu918 holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data, subject to satu918's legal retention obligations;
• Right to restrict processing: You may request that satu918 limit how it processes your data in certain circumstances;
• Right to data portability: You may request your data in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time.

To exercise any of these rights, please contact the satu918 support team via live chat or email (see Section 17). satu918 will respond to verified requests within thirty (30) days.

13.Children's Privacy

The satu918 Platform is strictly for individuals aged 21 years and above. satu918 does not knowingly collect personal data from individuals under the age of 21. If satu918 becomes aware that personal data has been collected from an underage individual, the account will be closed and all associated data will be deleted. Parents or guardians who believe a minor has registered with satu918 should contact our support team immediately.

14.Responsible Gaming and Data Processing

As part of satu918's responsible gaming obligations under its international gaming authority license, satu918 monitors member gaming behaviour — including session frequency, wagering patterns, and deposit velocity — to identify potential indicators of problem gambling. Where such indicators are detected, satu918 may proactively contact a member or apply account controls.

This processing is conducted on the basis of satu918's legitimate interest in protecting member wellbeing and its legal obligation to operate a responsibly governed gaming platform. Members may visit our Responsible Gaming page for more information about available tools and support resources.

15.Third-Party Links

The satu918 Platform does not contain links to third-party websites. All navigation and content on satu918.co is internal to the satu918 Platform. satu918 is not responsible for the privacy practices of any third-party services accessed independently by Members.

16.Updates to this Privacy Policy

satu918 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Material updates will be notified to registered Members via their registered email address or through an on-platform notification. The updated date at the top of this page will always reflect when the Policy was last revised. Continued use of the satu918 Platform following any update constitutes acceptance of the revised Privacy Policy.

17.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by satu918, please contact our support team:

• Live chat: Available 24/7 on the satu918 Platform
• Email: [email protected] (plain text — not a clickable link)

satu918 will acknowledge data-related enquiries within five (5) business days and aim to resolve all requests within thirty (30) calendar days.