Official Documents · KR18 Malaysia

Privacy Policy KR18 — Data Protection & Player Privacy in Malaysia

Your privacy is something we take seriously. This privacy policy clearly sets out the types of data we collect, how it is used, how it is protected, and your rights as a KR18 player regarding your personal information.

Updated: January 2026 Register KR18
Language: Malay (ms-MY) Jurisdiction: Malaysia Encryption: SSL 256-bit Malaysia PDPA Compliance No Sale of Data to Third Parties Effective: Immediately
Your data is protected with banking-grade 256-bit SSL encryption KR18 does not sell your personal data to any third party You have the right to request access, amendment or deletion of your data e-Wallet information is not stored on KR18's servers Contact [email protected] for any privacy enquiries This policy complies with the Malaysia Personal Data Protection Act Your data is protected with banking-grade 256-bit SSL encryption KR18 does not sell your personal data to any third party You have the right to request access, amendment or deletion of your data e-Wallet information is not stored on KR18's servers Contact [email protected] for any privacy enquiries This policy complies with the Malaysia Personal Data Protection Act

KR18 Malaysia Platform Privacy Policy

Our commitment to protecting your personal data as a kr18 player.

Important Note: By using the KR18 platform, you agree to this privacy policy. It explains how KR18 collects, uses, stores and protects your personal information. We encourage you to read this document carefully to fully understand our privacy practices.

KR18 is an online casino platform operating in Malaysia, fully committed to protecting the privacy of every player. We understand that your personal information is a trust you place in us — and we honour that trust with the utmost responsibility. This privacy policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in digital data protection.

1

Introduction to kr18's Privacy Policy

This privacy policy is issued by KR18 ("we", "our platform") and applies to all users and registered members of the KR18 platform in Malaysia. This document outlines our commitment to protecting your personal data and the rights you hold in relation to that information.

KR18 acts as the data controller for all personal information collected through our platform. This means we bear full responsibility for determining the purposes and means of processing your personal data, and we comply with all applicable data protection laws in Malaysia.

Player privacy is more than a legal obligation for KR18 — it is a core value embedded in every business decision we make. From the way we design our systems to the way our staff handle your information, privacy is always a priority we will never compromise for commercial gain.

2

Personal Data We Collect

KR18 collects various types of personal information depending on how you interact with our platform. We only collect data that is genuinely necessary for the stated purposes — the principle of data minimisation is fundamental to our data collection practices.

Data you provide directly during registration and use:

  • Full name as stated on your Malaysian identity card (MyKad)
  • An active Malaysian mobile phone number
  • Valid email address
  • Date of birth (for 18+ age verification)
  • Payment method details — including e-wallet account names (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) and FPX accounts (Maybank2u, CIMB Clicks)
  • Identity verification documents if requested (copy of MyKad or passport)

Data collected automatically while you use the platform:

  • Your device's IP address
  • Browser type and version used
  • Device type and operating system
  • Pages visited and time spent on each page
  • Gaming history and betting activity on the KR18 platform
  • Deposit and withdrawal transaction history
  • Cookie data and session identifiers
Data Category Example Information Requirements
Identity Data Full name, date of birth, IC number Mandatory
Contact Data Phone number, email address Mandatory
Financial Data E-Wallet account, transaction history Mandatory
Technical Data IP address, browser type Automatic
Gaming Data Betting history, account balance Automatic
Cookie Data User preferences, login sessions Automatic
3

How KR18 Uses Your Data

KR18 uses your personal data solely for legitimate, necessary, and relevant purposes in connection with providing you our online casino platform services. We do not process your data for any other purpose without your consent or a valid legal basis.

KR18's primary purposes for using your data are as follows:

  • Account management: Creating, managing and maintaining your KR18 account, including secure login processing and account activity monitoring.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals of winnings to the relevant payment method.
  • Identity verification: Ensuring that all KR18 players are aged 18 and above, and that no fraud or money laundering occurs through the platform.
  • Provision of gaming services: Providing access to over 200 slot and live casino games, including Fortune Mouse, Safari Wilds, Burning Hot, Gems Bonanza, Wild West Gold, Sic Bo Live and Immersive Roulette.
  • Customer support: Handling enquiries, resolving technical issues and providing support in Bahasa Malaysia, 24/7.
  • Security & fraud prevention: Detecting and preventing fraudulent activity, identity theft, money laundering and bonus system abuse.
  • Legal compliance: Fulfilling reporting obligations to Malaysian regulatory authorities where required by law.
  • Relevant marketing: Sending promotions and bonus offers relevant to your interests and playing habits — provided you have not objected to your data being used for this purpose.

Kr18 will not use your data for any purpose not stated in this privacy policy without first notifying you and, where required, obtaining your consent.

4

Sharing Data with Third Parties

KR18 does not sell, rent or trade your personal information to any third party for their own marketing purposes. This is an absolute commitment we have upheld since day one of KR18's operations.

That said, in the course of operating our business, KR18 may share your data with a limited set of third-party categories as outlined below, and only to the extent strictly necessary:

  • Payment service providers: E-wallet and FPX payment processors used to handle your deposits and withdrawals. Data is shared solely for the purpose of processing the relevant transactions.
  • Game providers: Gaming platforms such as Evolution Gaming and Pragmatic Play may receive the session data required to deliver your gaming experience. They do not receive your full identity information.
  • IT service providers: Companies that provide KR18 with server infrastructure, cybersecurity, data analytics, and technical support services. All such providers are bound by strict confidentiality agreements.
  • Regulatory authorities and law enforcement: kr18 may be required to disclose certain information to Malaysian authorities pursuant to a court order or other legal obligations.

Every third party we share data with is bound by a data protection agreement requiring them to safeguard your information to a standard equivalent to or stricter than KR18's own. We do not permit any third party to use your data for their own purposes.

KR18's Commitment: We have never sold, and will never sell, your personal data to marketing companies, data brokers, or any party looking to use it for their own business purposes. Your information exists to provide you with our services — not to be sold.

5

Data Security on the KR18 Platform

KR18 invests heavily in security technology and processes to ensure your personal data is protected against unauthorised access, loss, misuse, disclosure, or modification. This is not just a promise — our security infrastructure is built from the ground up to deliver maximum protection for every KR18 player.

Key security measures we have implemented include:

  • SSL 256-bit Encryption: All communication between your browser and kr18's servers is encrypted using SSL/TLS protocols with 256-bit keys — the same technology used by leading Malaysian financial institutions and banks such as Maybank and CIMB.
  • Password encryption: Your password is never stored in plain text. KR18 uses strong cryptographic hashing algorithms to store passwords — meaning even KR18 staff cannot view your password.
  • Secure server infrastructure: Your data is stored in data centres that meet international security standards, with strict physical and digital access controls in place.
  • 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
  • Restricted staff access: Only KR18 staff who require access to specific data in order to perform their duties are permitted to do so, and all access is logged and audited.

While KR18 takes all reasonable steps to protect your data, no security system is 100% impenetrable. We encourage you to do your part by using a strong password, not sharing your login credentials with anyone, and contacting us immediately if you suspect any unauthorised activity on your account.

SSL 256-bit Password Encryption Secure Servers 24/7 Monitoring Restricted Access Regular Audits
6

Cookies & Tracking Technologies

Kr18 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website, enabling our platform to remember your preferences and deliver a smoother, more personalised experience.

The types of cookies used by KR18 are as follows:

  • Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: Saving your preferences such as language selection, display settings, and game session information for a better experience.
  • Analytics Cookies: Helping us understand how players use the kr18 platform so we can make continuous improvements. Analytics data is collected in aggregate and anonymised form.
  • Performance Cookies: Monitoring page load speeds and identifying any technical issues that need to be resolved.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and your overall experience on the KR18 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7

Your Personal Data Rights

As a kr18 player and as an individual whose personal data is processed by us, you hold a range of rights protected under Malaysia's Personal Data Protection Act 2010. kr18 fully respects these rights and provides straightforward mechanisms for you to exercise them.

Right of Access

You have the right to request a copy of all personal data KR18 holds about you. This request will be processed within a reasonable timeframe.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data that we hold about you.

Right to Erasure

Under certain circumstances, you have the right to request that we delete your personal data — subject to our legal record-retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide any reason.

Right to Restriction

You have the right to request that we restrict how we process your data under certain circumstances, such as when you are disputing the accuracy of the data in question.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format for transfer to another data controller where applicable.

To exercise any of the rights above, please contact the kr18 privacy team by email at [email protected] with the subject line "Privacy Rights Request". We will process your request within 30 business days and may need to verify your identity before doing so.

8

Children's Data Protection

The kr18 platform is exclusively for adults aged 18 and above. kr18 does not knowingly collect, store, or process any personal information from individuals under the age of 18. This is a non-negotiable policy.

If we become aware that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to delete that information from our records, close the account in question and forfeit any remaining balance or winnings. Parents or guardians who discover that their child has registered a KR18 account should contact us immediately at [email protected] so that we may take the appropriate action without delay.

9

Cross-Border Data Transfers

In certain circumstances, your personal data may be stored or processed outside Malaysia — for example, by IT service providers or international game providers that we work with. When this occurs, KR18 ensures that adequate safeguards are in place for your data through appropriate data transfer mechanisms.

The measures KR18 takes to protect data transferred across borders include:

  • Ensuring that recipients maintain a privacy policy equivalent to or stricter than Malaysia's standards
  • Requiring written data protection agreements with all international third-party providers
  • Transferring only the minimum data necessary for the specific permitted purpose
  • Periodically monitoring third-party providers' compliance with their data protection obligations
10

Amendments to KR18's Privacy Policy

KR18 reserves the right to amend, update or replace this privacy policy from time to time to reflect changes in our practices, legal requirements or technological developments. The latest version of the privacy policy is always available on this page with a clearly stated update date.

When we make material changes to this privacy policy, we will endeavour to provide reasonable notice to KR18 players — either by email to their registered address or via a prominent notice on the KR18 platform — before the changes take effect. For minor amendments, the changes will take effect immediately upon publication on the platform.

We encourage you to review this privacy policy page periodically to stay informed about how KR18 protects your privacy. Continued use of the KR18 platform following any amendments constitutes acceptance of the revised privacy policy.

11

Contact the kr18 Privacy Team

If you have any questions, concerns, or complaints regarding this privacy policy or how kr18 handles your personal data, we welcome you to reach out to us directly. The kr18 privacy team is available to assist you in Bahasa Malaysia and is committed to responding to every enquiry thoroughly and transparently.

How to reach the KR18 privacy team:

  • Email: [email protected] (use the subject line "Privacy Enquiry" for a faster response)
  • Live Chat: Via the live chat feature available on the KR18 platform, 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within 14 business days of receipt. For more complex privacy rights requests, this period may be extended to 30 business days, with prior notice to you.

Contact Us: For enquiries or complaints regarding your data privacy at KR18, email us at [email protected] or use the live chat on the platform. Our team communicates in Bahasa Malaysia and is available 24/7.

Kr18's Six Privacy Commitments to Malaysian Players

The data protection principles that underpin KR18's privacy practices every day.

Banking-Grade 256-bit SSL Encryption

Every bit of data transmitted between your device and KR18's servers is encrypted with SSL 256-bit — the same technology used by Maybank, CIMB, and Malaysia's leading financial institutions. Whether you're making a deposit via Touch 'n Go eWallet or playing slots, your connection is always secure and fully encrypted.

No Sale of Data to Third Parties

KR18 makes an absolute commitment never to sell, rent or trade your personal information to any party for marketing purposes. Your data is collected solely to provide KR18's services to you — not to be sold to data brokers or marketing companies. This is a principle we will never compromise.

Full Control in Your Hands

You have full control over your personal data at KR18 — including the right to access, correct, delete or restrict the processing of your data. You may also object to the use of your data for marketing purposes at any time. All such requests can be submitted to us via email or KR18 live chat.

E-Wallet Transaction Security

Your e-wallet account details — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow — are not stored in kr18's database. All transactions are processed directly through authorised third-party payment platforms with additional encryption. This means your e-wallet information remains secure even in the unlikely event of a security incident on our end.

Malaysian PDPA Compliance

Kr18's privacy policy is drafted in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We understand local data protection laws and adhere to them not out of obligation, but because we believe robust privacy protection is the foundation of the trust Malaysian players place in kr18.

Privacy Support in Bahasa Malaysia

Kr18's Bahasa Malaysia-speaking support team operates 24 hours a day and is ready to assist with any privacy or data security enquiries. You won't need to worry about language barriers when dealing with something as important as the protection of your personal data. Email us at [email protected] or use the live chat.

What KR18 Does & Does Not Do with Your Data

Clarity and transparency are the core principles of kr18's privacy policy. We want you to know exactly what happens to your data.

What kr18 Does
All data is encrypted with 256-bit SSL at all times
Storing passwords in an encrypted, unreadable format
Using data solely for the purposes stated in this policy
Respecting your right to access, correct and delete your data
Compliant with Malaysia's PDPA and international standards
Retaining records only for as long as legally required
What KR18 Does NOT Do
Selling or renting your data to third parties for marketing purposes
Storing credit card information or full e-wallet account details
Using your data for undisclosed purposes without consent
Collecting data from individuals under 18 years of age
Sharing more data than necessary with third-party providers

kr18 Privacy FAQ

Does KR18 store my GrabPay account information?

No. Your full e-wallet account details are not stored on KR18's servers. Transactions are processed directly through a secure payment gateway.

Can I request kr18 to delete all my data?

Yes, you may request deletion of your data under certain circumstances. Contact [email protected]. However, some records may need to be retained to fulfil legal obligations.

Who can view my gaming data at KR18?

Only KR18 staff who have been granted specific authorisation and require access to carry out their duties are permitted to do so. All access is logged and audited on a regular basis.

How long does kr18 retain my records?

KR18 retains transaction records for the period required by Malaysian law. Once that period has lapsed, records that are no longer needed will be securely destroyed.

Privacy Guaranteed, Gaming Secured — Join KR18 Today

Now that you know how kr18 safeguards your privacy and personal data, it's time to enjoy over 200 of Malaysia's best slots and Live Casino games — with the confidence that your information is always in safe hands. Register for free and claim your welcome bonus today.

For adults aged 18 and above only. Please gamble responsibly.

Related Links on kr18
About Us — The story and mission of the KR18 platform
Terms & Conditions — Platform terms of use
Responsible Gaming — Responsible gambling tools
Frequently Asked Questions — Answers to common questions
Register — Create your KR18 account for free
Log In — Access existing account

Privacy enquiries: [email protected]

Bahasa Melayu