satu918 Privacy Policy

Last updated: 12 June 2026  ·  Effective immediately upon publication.

1. Introduction

This Privacy Policy ("Policy") describes how satu918 ("satu918", "we", "us", "our"), the operator of the online gaming platform accessible at satu918.org, collects, uses, stores, discloses, and otherwise processes personal data relating to registered members and visitors ("you", "User"). This Policy forms part of satu918's broader legal framework alongside the Terms & Conditions.

satu918 is committed to handling personal data responsibly, lawfully, and transparently — consistent with the obligations imposed by its international gaming licence and applicable data protection law. By registering on satu918 and using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing described herein to the extent that such processing is based on consent.

If you have any questions or concerns about how satu918 handles your personal data, please contact our Data Protection contact point using the details set out in Section 15.

2. Data Controller

For the purposes of applicable data protection law, satu918's operating entity is the data controller in respect of personal data processed in connection with the Platform. Details of the registered entity are available upon request from customer support. The data controller is responsible for ensuring that personal data is processed lawfully, fairly, and in accordance with this Policy.

3. Personal Data We Collect

satu918 collects the following categories of personal data:

• Registration Data: Full name, date of birth, email address, username, and password (stored in hashed form) provided when you create a satu918 Account.
• Contact Information: Malaysian mobile phone number, and residential address (collected during KYC verification).
• Identity & Verification Documents: Copies of your MyKad, passport, or other government-issued identification, and proof of address documents submitted for KYC compliance.
• Financial Data: Payment method identifiers (e.g., the last four digits of a card, Touch n Go eWallet reference), transaction history, deposit and withdrawal records. satu918 does not store full card numbers; payment card data is processed by PCI-DSS compliant payment processors.
• Gaming Activity Data: Bets placed, games played, session durations, game outcomes, bonus claims, and responsible gaming limit settings.
• Device and Technical Data: IP address, device type, operating system, browser type and version, and unique device identifiers collected automatically when you access the Platform.
• Communications Data: Records of correspondence between you and satu918 customer support, including live chat transcripts and email records.
• Cookie and Tracking Data: Information collected through cookies and similar tracking technologies as described in Section 7.

4. How satu918 Uses Your Personal Data

satu918 processes personal data for the following purposes:

• Account Management: Creating and maintaining your satu918 Account, authenticating your identity upon login, and managing your account preferences and responsible gaming settings.
• KYC and Regulatory Compliance: Verifying your identity and age (21+) as required under satu918's licensing obligations, and conducting anti-money-laundering (AML) and counter-terrorism financing (CTF) checks.
• Payment Processing: Facilitating deposits to and withdrawals from your satu918 Wallet via your chosen MYR payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or card).
• Platform Provision and Improvement: Delivering the gaming products, sportsbook, and associated services; monitoring platform performance; identifying and resolving technical issues; and developing new features.
• Customer Support: Responding to enquiries, processing complaints, and providing assistance via live chat or email.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, collusion, bot usage, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and to administer self-exclusion and limit settings.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications (see Section 13).
• Legal Obligations: Meeting reporting and record-keeping requirements imposed by the Licensing Authority and other applicable regulatory bodies.

5. Legal Bases for Processing

satu918 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to perform our obligations under the Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with KYC, AML, CTF, and other regulatory requirements under satu918's licensing framework.
• Legitimate Interests: Processing necessary for satu918's legitimate interests, including fraud prevention, platform security, service improvement, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where satu918 relies on your consent (e.g., for direct marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Third-Party Data Sharing

satu918 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of third parties strictly on a need-to-know basis:

• Payment Processors: Third-party providers facilitating MYR deposits and withdrawals, including e-wallet operators (Touch n Go, Boost) and banking partners (Maybank, CIMB, Public Bank) and international card schemes (Visa, Mastercard). These parties process financial data subject to their own regulatory obligations and satu918's data processing agreements.
• Game Studios and Content Providers: Licensed game studios providing live casino, slot, and lottery content accessible on the Platform. These providers may receive anonymised session data required for technical integration.
• Identity Verification Services: Third-party KYC and AML verification providers processing identity documents for regulatory compliance purposes.
• Cloud and Infrastructure Providers: Hosting and data storage providers bound by data processing agreements and applicable security standards.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or the Licensing Authority's regulatory framework, satu918 will disclose personal data to competent authorities.

All third-party service providers with whom satu918 shares personal data are subject to binding contractual obligations requiring them to: use the data only for the specified purpose; maintain appropriate security measures; and not further disclose the data without satu918's authorisation.

7. Cookies and Tracking Technologies

satu918 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform for the following purposes:

• Essential Cookies: Strictly necessary for the Platform to function, including session authentication and security tokens. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collecting anonymised data on how Members use the Platform to identify usability issues and guide product improvements.
• Functional Cookies: Storing your language preferences, interface settings, and responsible gaming configurations between sessions.
• Analytics Cookies: Aggregated, anonymised traffic analysis used internally to understand Platform usage patterns. satu918 does not use third-party behavioural advertising cookies.

You may configure your browser to reject non-essential Cookies. Doing so will not prevent access to the Platform but may affect certain functional features. The essential Cookies required for login and security cannot be disabled.

8. Data Retention

satu918 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your active membership and for a period of five (5) years following Account closure, to meet licensing and AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure or the last transaction, in accordance with licensing authority requirements.
• Transaction and Betting Records: Retained for five (5) years following the date of each transaction, as required for regulatory and audit purposes.
• Customer Support Communications: Retained for two (2) years following resolution of the relevant query or complaint.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent mechanism.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised using industry-standard methods.

9. International Data Transfers

satu918 and certain of its third-party service providers operate infrastructure in jurisdictions outside Malaysia. Where personal data is transferred internationally, satu918 ensures that such transfers are subject to appropriate safeguards, which may include: standard contractual clauses approved by a recognised data protection authority; binding corporate rules; or transfer to a jurisdiction recognised as providing an adequate level of data protection. Details of the safeguards applicable to specific transfers are available upon request from our Data Protection contact point.

10. Your Data Subject Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by satu918:

To exercise any of the above rights, please contact satu918's Data Protection contact point using the details in Section 15. satu918 will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further two (2) months, in which case you will be notified of the extension and its reasons within the initial thirty-day period.

11. Data Security

satu918 implements technical and organisational security measures appropriate to the risk level presented by the processing activities and the sensitivity of the data involved. These measures include: 256-bit SSL/TLS encryption for all data in transit; encryption of sensitive data at rest; access controls limiting staff access to personal data on a strict need-to-know basis; regular security assessments and penetration testing of Platform infrastructure; and incident response procedures for detecting and reporting data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, satu918 will notify you without undue delay using the email address registered to your Account, in accordance with applicable notification obligations.

Whilst satu918 takes all reasonable steps to protect your personal data, no method of transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your satu918 login credentials and for ensuring that your device is appropriately secured.

12. Children's Privacy

The satu918 Platform is strictly restricted to individuals aged 21 years and above. satu918 does not knowingly collect, use, or store personal data relating to persons under the age of 21. If satu918 becomes aware that personal data of an under-21 individual has been collected, it will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on satu918, please contact us immediately at [email protected].

13. Marketing Communications

satu918 may send you promotional communications about bonuses, new games, and platform updates where you have provided consent to receive such communications during registration or through your Account preferences. You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your satu918 Account settings under Profile → Notifications; or
• Using the unsubscribe link contained in any marketing email; or
• Contacting satu918 customer support via live chat or email at [email protected].

Withdrawal of consent to marketing communications does not affect your ability to use the satu918 Platform and does not constitute Account closure. You will continue to receive transactional communications required for Account management (e.g., deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preferences.

14. Updates to This Privacy Policy

satu918 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — defined as changes that significantly affect your rights or the manner in which satu918 processes your personal data — will be communicated to registered Members via email at least fourteen (14) days before the amended Policy takes effect. Non-material changes (such as typographical corrections or clarifications) may take effect immediately upon publication on the Platform.

The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the satu918 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

15. Contact and Data Protection Enquiries

For all privacy-related enquiries, data subject rights requests, or concerns about how satu918 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the satu918 Platform — the fastest channel for general queries.
• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in the subject line for routing to the appropriate team.

satu918 will acknowledge receipt of all privacy enquiries within five (5) business days and will endeavour to resolve substantive requests within thirty (30) days of identity verification. If you are not satisfied with satu918's response to your privacy concern, you may have the right to lodge a complaint with the data protection supervisory authority or the Licensing Authority's consumer protection mechanism.