Privacy Policy

KES918 ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of all individuals who interact with our platform at https://kes918.cam. This Privacy Policy ("Policy") describes in detail the types of personal information we collect, the purposes for which we collect and process it, the parties with whom we may share it, and the rights you hold as a data subject.

This Policy applies to all users of the kes918 platform, including registered account holders, visitors to the website, and individuals who contact us through any communication channel. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

By creating an account on kes918, depositing funds, placing a wager, or otherwise using any part of our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, location data, online identifier, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means kes918, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of kes918 pursuant to a written data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "Cookies" means small text files placed on your device by the platform to facilitate session management, analytics, and personalisation functions.
• "KYC" means the Know Your Customer identity verification process required by regulatory and anti-money laundering obligations.

KES918 collects the following categories of Personal Data in the course of providing its services:

• Full legal name as per your MyKad, passport, or other official identity document
• Date of birth (for age verification — minimum age 21)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Government-issued identification document numbers

• Bank account details, e-wallet identifiers, and cryptocurrency wallet addresses used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and timing
• Payment method information (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank)
• Records of bonuses claimed, wagering activity, and associated balances

• IP address, browser type, and operating system
• Device identifiers and device type
• Pages visited, session duration, and navigation patterns within the platform
• Game session logs, bet history, and in-play activity records
• Login timestamps and access location data

• Content of customer support conversations, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Responses to surveys or promotional communications where applicable

KES918 collects Personal Data through the following primary channels:

• Direct collection — information you provide voluntarily when registering an account, completing KYC verification, contacting support, or submitting forms on the platform.
• Automated collection — technical and usage data gathered automatically through cookies, server logs, and similar technologies when you access and interact with the platform.
• Third-party sources — identity verification services, fraud prevention providers, and payment processors may provide us with supplementary data necessary to fulfil our regulatory obligations.
• Publicly available sources — where relevant to our AML screening obligations, we may consult publicly available databases, sanction lists, or regulatory registries.

KES918 processes your Personal Data for the following specific purposes:

KES918 processes your Personal Data under the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity — processing required to perform the contract between you and kes918, including account creation, transaction processing, and platform access.
• Legal Obligation — processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML screening, and regulatory reporting obligations.
• Legitimate Interests — processing carried out in pursuit of kes918's legitimate business interests, including fraud prevention, platform security, and analytics, where such interests do not override your fundamental rights and freedoms.
• Consent — processing based on your freely given consent, such as the receipt of marketing communications. You may withdraw consent at any time by contacting our support team or updating your account communication preferences.

KES918 does not sell, rent, or otherwise commercialise your Personal Data. We may disclose your data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors — third-party payment service providers (including Touch 'n Go, Boost, GrabPay, FPX operators, and cryptocurrency exchanges) that facilitate your deposit and withdrawal transactions.
• Identity Verification Providers — third-party KYC and age verification service providers engaged to fulfil our regulatory identity verification obligations.
• Fraud Prevention and AML Platforms — specialist service providers used to screen transactions and accounts against known fraud and financial crime indicators.
• Game Studio Providers — licensed game content providers integrated into the kes918 platform may receive limited session and transaction data for audit and compliance purposes.
• Regulatory Authorities — we are required to disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where we receive a lawful order, request, or directive requiring such disclosure.
• Professional Advisors — legal advisors, auditors, and other professional service providers retained by kes918 who are bound by professional confidentiality obligations.

KES918 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data — retained for the duration of your account's active status plus a minimum post-closure period as required by applicable law.
• Transaction and Financial Records — retained for a minimum of five (5) years from the date of the transaction, in line with standard AML record-keeping requirements applicable to gaming operators.
• KYC Verification Documents — retained for a minimum of five (5) years following the date of account closure or the date of the last transaction, whichever is later.
• Customer Support Records — retained for a minimum of three (3) years to enable dispute resolution and service quality review.
• Marketing Consent Records — retained until withdrawal of consent, plus a reasonable period to demonstrate compliance.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

KES918 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields at rest within our database infrastructure
• Role-based access controls limiting staff access to Personal Data to those with a demonstrated operational need
• Multi-factor authentication requirements for internal system access
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals
• Firewall protection and intrusion detection monitoring on all production systems
• Documented incident response procedures for data breach scenarios

KES918 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse how the platform is used. The following categories of cookies are employed:

These cookies are essential for the platform to function correctly and cannot be disabled. They include session authentication tokens, security tokens, and load balancing cookies. No personally identifiable information is stored in strictly necessary cookies beyond what is required for session management.

These cookies collect anonymised information about how visitors interact with the platform — such as pages visited most frequently and error messages encountered — to help us improve the overall user experience. Data collected via analytics cookies is aggregated and does not identify individual users.

These cookies allow the platform to remember your preferences and personalisation settings, such as preferred language, currency display (MYR/RM), and last active game category, to provide a more tailored experience on return visits.

You may control or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may impair the functionality of the kes918 platform, including your ability to log in, maintain your session, or access certain features. Strictly necessary cookies cannot be disabled without significantly impacting platform usability.

Subject to applicable data protection law and the specific circumstances of each request, you hold the following rights in respect of your Personal Data processed by kes918. To exercise any of these rights, please contact our support team using the details in Section 15.

The kes918 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals below this age threshold. Age verification is a mandatory step in our account registration and KYC process, and we reserve the right to request supporting documentation at any point.

If kes918 becomes aware that Personal Data belonging to a person under the age of 21 has been collected in error, we will take immediate steps to delete such data and close the associated account. If you have reason to believe that a minor has registered on our platform, please contact our support team immediately so that appropriate action can be taken.

In the course of providing our services, certain Personal Data may be transferred to and processed by our service providers and partners located in jurisdictions outside Malaysia. These transfers are necessary for the delivery of payment processing, identity verification, game content, and technical infrastructure services.

Where Personal Data is transferred internationally, kes918 implements appropriate safeguards to ensure that the receiving party provides an adequate level of data protection. Such safeguards include contractual arrangements that impose data protection obligations equivalent to those applied by kes918, and assessments of the data protection framework in the receiving jurisdiction.

KES918 reserves the right to revise this Privacy Policy at any time. Where amendments are material — such as changes to the categories of data collected, the purposes of processing, or the rights available to you — we will provide advance notice to registered users via email or a prominent notice on the platform prior to the changes taking effect.

Your continued use of the kes918 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account in accordance with the account closure provisions in our Terms & Conditions.

The effective date of the current version of this Policy is displayed as the "Last Updated" date at the top of this page.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your Personal Data, please contact the kes918 Data Privacy team through any of the following channels:

For matters relating to responsible gambling, account restrictions, or self-exclusion, please refer to our dedicated Responsible Gambling page for specific guidance and tools.