Privacy Policy

1. Introduction

abang918 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all Members and visitors. This Privacy Policy explains in plain terms how abang918 collects, uses, stores, and shares personal information in connection with the operation of the online gaming platform accessible at abang918.asia.

This Policy applies to all personal data processed by abang918 in connection with the Services — whether you interact with the Platform via desktop browser in Kuala Lumpur, a mobile device in Penang, or any other access method from across Malaysia. By registering an account or using any part of the abang918 Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

This Policy should be read together with the abang918 Terms and Conditions, which govern the overall relationship between you and the Platform. Where a conflict exists between this Policy and a more specific notice provided at the point of data collection, the more specific notice prevails for that data processing activity.

2. Data Controller

The data controller responsible for your personal information is the Operator holding the international gaming authority licence under which abang918 is operated. The Operator is responsible for determining the purposes and means by which your personal data is processed. For all privacy-related queries, contact the abang918 Data Protection team via the official support channel at abang918.asia — contact details are available on the Platform.

3. Personal Data We Collect

abang918 collects personal data across several categories depending on the nature of your interaction with the Platform:

• Registration Data: Full legal name, date of birth, email address, phone number, country of residence, and chosen username and password created during the abang918 account registration process.
• Identity Verification (KYC) Data: Copies of government-issued identity documents (e.g., Malaysian MyKad, passport), proof of address (e.g., utility bills, bank statements), and where required, source of funds documentation. These are collected to comply with anti-money laundering obligations and to verify the Member's age (minimum 21 years).
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, Boost account reference, bank account details for FPX transactions, card details masked in accordance with PCI-DSS standards), deposit and withdrawal history, and transaction amounts in MYR.
• Gaming Activity Data: Bet history, game session duration, win and loss records, responsible gaming limit settings, and self-exclusion status associated with your abang918 account.
• Technical & Device Data: IP address, device type and operating system, browser type and version, unique device identifiers, time zone settings, and referring URL. This data is collected automatically when you access abang918.
• Communications Data: Records of your interactions with abang918 customer support, including live chat transcripts, email correspondence, and support ticket logs.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications from abang918, including bonus offers, game announcements, and platform updates.

4. How We Collect Your Data

abang918 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or update your account profile;
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or interact with the abang918 platform;
• From third parties — including payment processors (for transaction confirmation and fraud screening), identity verification service providers, and fraud prevention agencies as part of our KYC and AML compliance obligations.

5. Purposes and Legal Basis for Processing

abang918 processes your personal data for the following purposes, each supported by an appropriate legal basis:

• Account creation and management — necessary for performance of our contract with you as an abang918 Member;
• Payment processing and fraud prevention — necessary for the performance of our contract and for compliance with legal obligations;
• Age and identity verification (KYC) — required by our international gaming authority licence conditions and applicable AML regulations;
• Responsible gaming compliance — required by licence conditions and in our legitimate interest to protect Members from gambling-related harm;
• Customer support — necessary for the performance of our contract and our legitimate interest in maintaining service quality;
• Platform security and fraud detection — in our legitimate interest and to comply with legal obligations;
• Marketing communications — where you have provided explicit consent, which you may withdraw at any time through your abang918 account settings or by contacting support;
• Analytics and platform improvement — in our legitimate interest to understand how Members use abang918 and to improve the platform experience.

6. Sharing and Disclosure of Personal Data

abang918 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data may be shared in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with verified Malaysian payment processors (including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank) solely to facilitate deposit and withdrawal processing;
• Game Studios and Content Providers: Minimal technical session data (session token, bet amount, game ID) is shared with certified game studios (such as Pragmatic Play and PG Soft) to operate game sessions on abang918. These studios are contractually bound to data protection standards;
• Identity Verification Providers: KYC documents may be processed by third-party identity verification service providers operating under strict data processing agreements;
• Regulatory and Law Enforcement Authorities: abang918 will disclose personal data to relevant regulatory bodies, law enforcement agencies, or gaming authorities where required by Applicable Law, court order, or licence condition;
• Corporate Transactions: In the event of a merger, acquisition, or sale of the Operator's business, personal data held by abang918 may be transferred to the successor entity, subject to equivalent privacy protections.

7. International Data Transfers

abang918 operates under an international gaming authority licence, and certain data processing activities — including game studio integrations and platform infrastructure — may involve the transfer of personal data to jurisdictions outside Malaysia. Where such transfers occur, abang918 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent transfer mechanisms recognised under Applicable Law.

Payment processing for Malaysian Members via Touch 'n Go eWallet, Boost, Maybank FPX, CIMB, and Public Bank is conducted through Malaysian-registered entities subject to Malaysian financial regulations, including Bank Negara Malaysia oversight.

8. Data Retention

abang918 retains personal data for as long as your account remains active and for the period required by Applicable Law and licence conditions thereafter. Key retention periods include:

• Account registration and KYC data: minimum 5 years from account closure, as required by AML regulations;
• Financial transaction records: minimum 5 years from the date of the transaction;
• Gaming activity logs: minimum 3 years from the date of activity;
• Support communications: 3 years from the date of the last interaction;
• Marketing consent records: retained until consent is withdrawn and for 1 year thereafter as evidence of consent status.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9. Security of Your Personal Data

abang918 implements technical and organisational security measures proportionate to the risk associated with each category of personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and abang918 servers;
• Encryption of sensitive personal data at rest, including identity documents and financial account references;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of the abang918 platform infrastructure;
• Incident response procedures for promptly detecting, investigating, and notifying affected Members and relevant authorities of any personal data breach, in accordance with Applicable Law.

Members are reminded that account security is a shared responsibility. abang918 recommends enabling two-factor authentication (2FA) on your account and using a strong, unique password for your abang918 login. The Platform will never ask for your full password via any support channel.

10. Cookies and Tracking Technologies

abang918 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies in use include:

• Strictly Necessary Cookies: Session cookies required to maintain your abang918 login state across page navigation. These cannot be disabled without impairing core platform functionality;
• Functional Cookies: Remember your language preferences, game lobby filter settings, and other personalisation choices;
• Analytics Cookies: Collect aggregate, anonymised data on how Members navigate abang918 — page views, session duration, feature usage — to inform platform improvements. No personal betting data is transmitted via analytics cookies;
• Security Cookies: Support fraud detection and abuse prevention mechanisms, including bot detection and CSRF protection.

You may manage cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from using abang918, though some personalisation features may be affected.

11. Your Data Protection Rights

Subject to Applicable Law and the conditions of our gaming licence (which may impose data retention obligations that limit certain rights), abang918 Members have the following rights in respect of their personal data:

• Right of Access: Request a copy of the personal data abang918 holds about you;
• Right of Rectification: Request correction of inaccurate or incomplete personal data;
• Right of Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to Restrict Processing: Request that abang918 limit processing of your data in certain circumstances;
• Right to Data Portability: Request a structured, machine-readable copy of personal data you have provided to abang918;
• Right to Object: Object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the abang918 Data Protection team via the official support channel. We will respond to verified requests within 30 days. We may need to verify your identity before processing a request.

12. Children and Minors

abang918 is strictly an adults-only platform. Persons under the age of 21 are prohibited from registering or using the Services. abang918 does not knowingly collect personal data from persons under 21. Where abang918 identifies or is notified that a minor has provided personal data in connection with an account, that account will be immediately closed, any data collected will be deleted, and any financial transactions associated with the account will be reviewed in accordance with our KYC and responsible gaming procedures.

If you are a parent or guardian and believe a person under 21 in your care has registered with abang918, please contact our support team immediately.

13. Third-Party Links

The abang918 platform does not contain links to third-party websites for general browsing. Where third-party service integrations exist (such as payment processors accessed via redirect during deposit or withdrawal), those services are governed by their own privacy policies. abang918 is not responsible for the privacy practices of third-party services and recommends that Members review the privacy notices of any external service they interact with in connection with their abang918 account activity.

14. Changes to This Privacy Policy

abang918 reserves the right to update this Privacy Policy at any time to reflect changes in Applicable Law, licence conditions, platform features, or data processing practices. Material changes will be communicated to active Members via the registered email address or a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of abang918 following notification of a material change constitutes acceptance of the revised Policy.

15. Contact and Complaints

For any queries regarding this Privacy Policy, to exercise your data protection rights, or to raise a privacy concern, please contact the abang918 Data Protection team via the official support channel available on the Platform. abang918 support is available 24 hours a day, 7 days a week. We are committed to resolving privacy concerns promptly and transparently.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.