User Data Protection

Privacy Policy 18bba

18bba takes seriously the trust you place in us when you register and play on our platform. This page explains in detail how we collect, store, use and protect your personal information as a registered user.

Updated: January 2026
Bahasa Melayu & English
Operating under international licensing

Your Privacy, Our Responsibility

18bba built this privacy policy on the principles of transparency, security and full user control over their own data.

High-Level Data Encryption

All your personal information and financial transactions are transmitted via SSL/TLS protocols. Stored data is also protected with additional encryption layers so it cannot be accessed by unauthorised parties.

Full Account Control

You have full control over your 18bba account — from updating personal information to requesting data deletion. Our team respects every request made through the proper official channels.

No Data Sales to Third Parties

18bba does not sell, rent or trade user personal information to any third party for marketing purposes. Data sharing only occurs in situations set out in this policy.

Regulatory Compliance

As a platform operating under international licensing, 18bba complies with the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by our regulatory authorities.

Communication Preferences

You can manage your communication preferences at any time — including promotional notifications, account updates and transaction alerts. Every marketing email includes an easy unsubscribe option.

24/7 Privacy-Related Support

If you have any questions about our privacy policy or the management of your personal data, the 18bba support team is available 24 hours a day, 7 days a week via live chat and email in both Bahasa Melayu and English.


Effective: 1 January 2026

1. Introduction

This Privacy Policy is issued by 18bba ("we", "our platform" or "18bba"), operating through the website 18bba.app. It describes how we handle personal information you provide or that we collect through your use of our services.

By registering an account, using any of our services or browsing the 18bba website, you acknowledge that you have read and understood this policy. We encourage you to read this entire document carefully before using our platform.

This policy is subject to change from time to time. Any material amendments will be communicated to registered users via email or in-platform notification. The latest effective date is shown at the top of this document.

This Privacy Policy should be read together with the Terms & Conditions of 18bba and the two documents complement each other.

2. Information We Collect

18bba collects various types of information depending on how you interact with our platform. This data collection is necessary to enable us to deliver services that are safe, fair and compliant with regulatory requirements.

a) Information You Provide Directly

  • Full name as shown on your identification card or MyKad
  • Active email address and mobile phone number
  • Date of birth — to verify that you are 21 years of age or older
  • Payment method information: Touch 'n Go eWallet, DuitNow, FPX account or crypto wallet address (USDT, BTC, ETH)
  • Identity verification (KYC) documents when requested — including a copy of your MyKad or passport
  • Any information you share while interacting with our customer service

b) Information Collected Automatically

  • IP address, browser type and operating system of your device
  • Login session data including time, duration and access location
  • History of gaming activity, bets and transactions in your account
  • Cookie data and similar tracking technologies to improve the user experience
  • Website interaction data such as pages visited and links clicked

c) Information from Third Parties

  • Verification data from payment service providers we work with
  • Age or identity check information from recognised third-party verification services
  • Data related to referral programmes, where applicable

3. Purpose of Data Use

Every type of data we collect has a clear and lawful purpose. 18bba does not use your information beyond the scope stated here.

  • Account management: Registering, verifying and maintaining your user account securely.
  • Transaction processing: Handling deposits via Touch 'n Go eWallet, DuitNow, FPX and crypto, as well as withdrawals within 5–30 minutes as we have committed.
  • Age verification: Ensuring all users are 21 years of age or older before being permitted to access any gambling services on our platform.
  • Security and fraud prevention: Detecting, investigating and preventing any suspicious activity, fraud or money laundering.
  • Legal compliance: Meeting KYC and AML obligations under our international licensing.
  • Service improvement: Analysing how users interact with the platform to improve the gaming experience, interface and customer service.
  • Marketing communications: Sending information about bonuses, promotions and platform updates — subject to your communication preferences.
  • Customer support: Resolving complaints, enquiries and technical requests you submit to our team.

4. Sharing of Personal Information

18bba does not sell, rent or disclose your personal information to third parties for their own commercial purposes. However, there are certain situations where data sharing is necessary and lawful:

  • Payment service providers: To process deposits and withdrawals, the necessary transaction information is shared with providers such as the FPX payment gateway, Touch 'n Go and the crypto platforms we use. They are bound by strict confidentiality agreements.
  • Game software providers: Game providers operating on our platform may receive the session data needed to run games. This does not include your full financial information.
  • Statutory authorities: 18bba will disclose required information when compelled to do so by a court order, regulatory directive or valid law enforcement request.
  • Business restructuring: In the event of a merger, acquisition or sale of business assets, user data may be transferred to the new entity — which will be bound by an equivalent or stricter privacy policy.
All third parties that receive user data from 18bba are required to comply with data protection standards equivalent to or higher than those we apply.

5. Data Security Measures

18bba continuously invests in security infrastructure to ensure user data remains protected at all times. Measures we apply include:

  • Use of SSL/TLS protocols for all data transmission between your device and our servers
  • Encryption of stored data using current industry standards
  • Strict internal access controls — only authorised staff may access sensitive user data
  • Regular security audits by independent third parties
  • Intrusion detection systems and continuous network monitoring
  • Secure password management — passwords are stored in hashed form and cannot be read as plain text
While we take all reasonable precautions, no online system can be guaranteed 100% secure. You are also responsible for keeping your password and account login information confidential.

6. Data Retention Period

18bba retains your personal information for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. Below are the general data retention guidelines:

  • Active account data: Retained for as long as your account remains active on the 18bba platform.
  • Data after account closure: Certain information such as transaction records and KYC logs may be retained for an additional period to meet regulatory and legal requirements.
  • Cookie data: Retention period depends on the type of cookie — session cookies expire when you close your browser, while persistent cookies have a set expiry date.
  • Support communications: Records of conversations with the support team are retained for quality and reference purposes.

When data is no longer needed and there is no legal obligation to retain it, 18bba will delete or destroy that data in a secure manner.

7. Your Rights as a User

As an 18bba user, you have the following rights regarding your personal information. To exercise any of these rights, please contact us through the official support channels.

Right of Access

Request a copy of the personal information we hold about you

Right of Rectification

Request correction of inaccurate or incomplete data

Right of Erasure

Request deletion of data under certain permitted circumstances

Right to Object

Object to the processing of your data for direct marketing purposes

Right to Portability

Request your data in a machine-readable format

Right to Restriction

Request restriction of data processing under certain circumstances

We will make every effort to process your request within a reasonable timeframe. In some cases, we may need to verify your identity before processing data-related requests.

8. Cookies and Tracking Technologies

18bba uses cookies and similar technologies to improve the user experience, analyse platform usage, and support certain functions. You can manage cookie settings through your browser, but please note that disabling certain cookies may affect platform functionality.

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collect data on how you use the website to help us improve our services.
  • Functional Cookies: Store your preferences such as language and display settings.
  • Marketing Cookies: Used to show you relevant promotional content within our platform.

9. Protection of Minors

The 18bba platform is intended solely for adult users aged 21 and above. We do not knowingly collect or process personal information from individuals under the age of 21.

If we find that information belonging to someone below the specified age limit has been collected, we will take immediate steps to delete that data and close the relevant account. Our age verification procedures are designed to prevent registration by individuals who do not meet the age requirement.

If you have reason to believe that someone under the age of 21 is using our platform, please notify us immediately through the official support channels.

10. Amendments to the Privacy Policy

18bba reserves the right to amend this Privacy Policy at any time. Material amendments — those that significantly change how we collect, use, or disclose your data — will be communicated through:

  • An in-platform notification after you log in to your 18bba account
  • An email to the address registered to your account
  • An update to the "Last Updated" date at the top of this page

Continued use of our platform after the amendment's effective date is considered your acceptance of the revised terms. If you do not agree with the amendments, you have the right to close your account and stop using our services.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the management of your personal data, please contact the 18bba support team through the following channels:

  • Live chat: Available 24 hours a day, 7 days a week in Malay and English through the 18bba platform
  • Email: [email protected]

We are committed to treating every privacy-related enquiry seriously and responding within a reasonable timeframe. Our team is trained to handle data protection issues with full professionalism and confidentiality.

Play with Confidence and Security

18bba protects your data so you can focus on the games. Register your account today and enjoy a 100% welcome bonus of up to RM888 with a 20x wagering requirement.

Questions about the Privacy Policy

Answers to the most frequently asked questions from users about privacy and data protection at 18bba.

During registration, 18bba collects your full name, email address, mobile phone number, date of birth and the password you choose. For identity verification (KYC) purposes, you may be asked to submit a copy of your MyKad or other valid identification document. Payment method information is also collected when you make your first deposit.

18bba does not sell or disclose your personal information to third parties for their own commercial purposes. Data sharing only occurs in limited situations — with payment service providers to process transactions, with game providers for technical functions, or with regulatory authorities when required by law. All such parties are bound by strict confidentiality agreements.

You can submit a data deletion request by contacting the 18bba support team via live chat or email at [email protected]. Our team will process your request after identity verification. Please note that some data may need to be retained to meet legal and regulatory requirements even after account closure.

After account closure, personal data that is no longer needed will be deleted or destroyed securely. However, transaction records, KYC logs and compliance-related information may be retained for an additional period as required by applicable regulatory obligations.

Yes. Every marketing email sent by 18bba includes an easy-to-use unsubscribe link. You can also manage your communication preferences through your account settings or by contacting our support team. Please note that account security and transaction-related emails will still be sent even if you unsubscribe from marketing communications.

Yes. All transaction information is transmitted via encrypted SSL/TLS protocols and stored in systems protected with an additional layer of encryption. Only specifically authorised staff can access transaction records, and every access is audited internally. The payment methods we support — Touch 'n Go eWallet, DuitNow, FPX and crypto — all operate through established secure channels.