Official Documents Last Updated: January 2026 PDPA Compliant

Satu918 Privacy Policy — Member Personal Data Protection

Satu918 takes the privacy and data security of all our members in Malaysia seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your information in accordance with the Personal Data Protection Act 2010 (PDPA).

Note: By using the satu918 platform, you agree to the collection and use of your information as described in this Privacy Policy. Please read this document in full before proceeding with registration or use of the platform.

Welcome to the satu918 Privacy Policy page. As an online gaming platform trusted by over 500,000 members across Malaysia, we understand that your trust is our most valuable asset. This Privacy Policy is designed to ensure you fully understand how your personal data is handled by us.

Satu918 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in user data management. We never sell, rent, or disclose members' personal data to external parties for marketing purposes without your explicit consent.

This policy is to be read together with Terms and Conditions and Responsible Gaming Policy us. Together, these three documents form the comprehensive agreement between you and satu918 regarding use of the platform.

01

Introduction and Scope of This Privacy Policy

This Privacy Policy applies to all users and members of the satu918 platform, covering the official website at satu918.win, the satu918 mobile app, and all other digital services operated by satu918. It governs how we collect, process, store, disclose, and protect your personal information.

By registering as a satu918 member, using any of our services, or simply browsing our website, you agree that your information may be collected and used in accordance with the terms set out in this document. If you do not agree, please stop using our platform and contact our support team to close your account.

Key Definitions

"Personal data" refers to any information that can identify you directly or indirectly, including your name, phone number, email address, financial information, IP address, and platform usage data. "Processing" covers any operation performed on personal data, including collection, storage, use, sharing, and deletion.

Satu918 is the data controller for all personal information collected through our platform. We are fully responsible for ensuring your personal data is processed lawfully, fairly, and transparently in accordance with applicable Malaysian law.

02

Information We Collect

Satu918 collects your personal information through several methods — directly from you, automatically via tracking technologies, and in some cases from trusted third-party sources. Below are the full details of the data categories we collect:

2.1 Information You Provide Directly

Data Category Examples of Information Requirements
Identity Information Full name, date of birth, MyKad/passport number Mandatory (KYC)
Contact Information Email address, phone number, residential address Mandatory
Account Information Username, password (encrypted), security questions Mandatory
Financial Information Bank account number, bank name, e-wallet details Mandatory (transaction)
Verification Documents IC/passport copy, proof of address, bank statement Mandatory (withdrawal)

2.2 Information Collected Automatically

When you use the satu918 platform, our systems automatically record certain technical information for security, analytics, and service improvement purposes:

  • IP address and approximate geographic location derived from IP.
  • Device type, operating system, and web browser version used.
  • Access log data including dates, times, and pages visited.
  • Gaming session details including games played, bets placed, and results.
  • User interaction data such as clicks, scrolls, and time spent on each section.
  • Cookie data and device identifiers used to recognise ongoing sessions.
Sensitive Information Notice

Satu918 does not collect sensitive information such as biometric data, medical records, or religious information unless required by law or with your explicit consent. All identity verification documents are processed in a secure, encrypted environment.

03

How We Use Your Personal Data

Satu918 uses collected personal data solely for lawful, relevant, and reasonable purposes. We do not process your data for any purpose beyond those stated below without obtaining fresh consent from you:

  • Account Management: Create, verify, and manage your member account, including the required KYC (Know Your Customer) process.
  • Transaction Processing: Process deposits, withdrawals, and any other financial transactions you carry out on the platform.
  • Service Delivery: Enable you to access and enjoy all games and services offered by satu918.
  • Customer Support: Handle enquiries, complaints, and assistance requests submitted to our support team.
  • Security and Fraud Prevention: Detect, investigate, and prevent fraudulent activity, money laundering, and security breaches.
  • Legal Compliance: Fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
  • Service Communications: Send important notifications relating to your account, transactions, security updates, and policy changes.
  • Marketing (with consent): Send promotional information, bonus offers, and the latest satu918 platform news if you have consented to receive them.
  • Platform Enhancement: Analyse usage patterns to improve platform performance, interface, and overall user experience.
Data Minimisation Principle

Satu918 adheres to the data minimisation principle — we only collect and use data that is strictly necessary to fulfil the stated purpose. Data that is no longer required will be deleted in accordance with our retention schedule.

04

Information Sharing and Disclosure

Satu918 does not sell, rent, or trade members' personal data to any third party. However, in the course of operating the platform, we may need to share certain information with the following parties under limited and controlled circumstances:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to support platform operations, including licensed payment processors, cloud service providers, cybersecurity firms, and analytics service providers. All third parties are bound by strict confidentiality agreements and are only permitted to process your data for purposes we specify.

4.2 Legal Requirements

Satu918 will disclose personal data to government authorities or law enforcement bodies if required to do so by Malaysian law, court order, or official investigation. In such cases, we will endeavour to notify you in advance unless prohibited by law.

4.3 Protection of satu918's Rights

We may disclose information where necessary to protect the rights, property, or safety of satu918, our members, or the public — including in cases of fraud, platform abuse, or serious security threats.

Cross-Border Data Transfers

Some of our service providers may be located outside Malaysia. In such cases, satu918 ensures that any international data transfers are carried out with adequate safeguards, including standard data transfer agreements and thorough security assessments, to maintain a level of protection equivalent to Malaysia's PDPA.

05

Data Security and Protection Measures

The security of your personal data is the absolute top priority at satu918. We continually invest in the latest security infrastructure and apply a defence-in-depth approach to ensure your data is always protected against unauthorised access, loss, or misuse.

5.1 Data Encryption

All data transmitted between your device and satu918 servers is protected by TLS 1.3 (Transport Layer Security) encryption. Sensitive data stored on our systems — including passwords and financial information — is secured with AES-256 encryption, the highest industry standard. Your password is never stored in plain text; it is processed using a secure hashing algorithm.

5.2 Access Controls

Access to members' personal data within the satu918 organisation is strictly limited on a need-to-know basis. Only staff who require access to carry out their duties are granted permission, and all access is logged and actively monitored.

5.3 Continuous Security Monitoring

The satu918 system is continuously monitored 24 hours a day, 7 days a week by our security team. We employ the latest threat detection technology and conduct regular penetration testing to ensure our systems remain protected against ever-evolving cyber threats.

Your Security Responsibilities

While satu918 implements comprehensive security measures, you also play an important role. Use a strong, unique password, enable two-factor authentication (2FA) where available, and never share your login credentials with anyone. Contact our support team immediately if you suspect your account has been accessed without authorisation.

06

Cookies, Tracking Technologies, and Your Choices

Satu918 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how members use our services, and deliver more relevant content. The following are the types of cookies we use:

Cookie Types Function Duration
Essential Cookies Enable core platform functions such as login and session security Session / 30 days
Performance Cookies Collect data on how members use the platform for improvement purposes Up to 1 year
Functional Cookies Remember your preferences such as language, display settings, and region Up to 1 year
Analytics Cookies Help us understand website traffic and usage patterns Up to 2 years

6.1 Managing Your Cookies

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the satu918 platform. Major browsers such as Chrome, Firefox, Safari, and Edge provide cookie management options within their respective settings menus.

07

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold. satu918 fully respects and facilitates the exercise of these rights:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data under certain circumstances permitted by law.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

Request restriction of data processing under certain circumstances during an investigation.

Right to Portability

Receive your personal data in a structured, machine-readable format.

How to Submit a Request

To submit any request regarding your privacy rights, please log in to your satu918 account and contact our support team via Live Chat. We will process your request within 30 business days. For complex cases, this period may be extended with prior notice to you.

08

Data Retention Period

Satu918 does not retain your personal data longer than is necessary for the purpose for which it was collected, or longer than required under Malaysian law. Our data retention policy is as follows:

  • Active Account Data: Retained for the duration your account remains active on the satu918 platform.
  • Financial Transaction Data: Retained for a minimum of 7 years in line with Malaysian financial and tax legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure or the last transaction, in accordance with AML requirements.
  • Security Logs: Retained for 2 years for security incident investigation purposes.
  • Support Communication Data: Retained for 3 years after the last interaction.
  • Marketing Data: Deleted immediately once you unsubscribe or request removal.

Once the relevant retention period expires, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

09

Third-Party Links and Integrated Services

The satu918 platform may contain links to third-party services such as payment providers, social media platforms, or other technical service providers. This Privacy Policy applies solely to the satu918 platform and does not cover the privacy practices of those third parties.

Satu918 is not responsible for the privacy policies or data collection practices of third-party platforms linked from our platform. We encourage you to read the privacy policy of each third-party platform you visit, especially before providing any personal information.

Payment Providers

When you make a deposit or withdrawal, your transaction is processed by a licensed third-party payment provider. Any financial information shared with these providers is subject to their respective privacy policies. satu918 ensures that all payment providers we work with comply with the highest PCI-DSS security standards.

10

Amendments to This Privacy Policy

Satu918 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Any changes will be published on this page with a clear effective date.

For significant amendments — particularly those affecting how we use or disclose your personal data — satu918 will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Your continued use of the satu918 platform after the effective date constitutes your acceptance of the amended Privacy Policy.

Amendment History

Current version: 3.1 — Effective: 1 January 2026. Previous versions: 3.0 (March 2026), 2.5 (August 2023), 2.0 (January 2023). Contact our support team if you require a copy of an earlier version.

If you disagree with any amendments made, you have the right to close your account and stop using the satu918 platform before the amendments take effect. Please contact our support team for assistance with the account closure process.

Why Your Privacy Is Safe with satu918

We go beyond mere legal compliance — we believe personal data protection is a fundamental right of every member.

Military-Grade Encryption

All data is encrypted using AES-256 and TLS 1.3 — the same encryption technology used by leading financial institutions and security agencies worldwide.

Malaysia PDPA Compliance

Satu918 operates in full compliance with Malaysia's Personal Data Protection Act 2010. We undergo regular compliance audits conducted by independent third parties.

Full Control in Your Hands

Through your account settings, easily manage privacy preferences, communication subscriptions, and data requests — no need to contact support.

No Data Sales

Satu918 has never and will never sell, rent, or trade members' personal data to advertisers or third-party data brokers.

Secure Infrastructure

Your data is stored in ISO 27001-certified data centres with multiple redundancies, 24/7 monitoring, and a comprehensive disaster recovery plan.

Transparent and Accountable

We proactively inform members of any policy changes or security incidents. Trust is built through transparency, not empty promises.

Frequently Asked Questions About satu918 Privacy

Absolutely not. satu918 never sells, rents, or trades members' personal data to any third party for marketing or advertising purposes. Your data is used solely for platform operations and legal compliance as outlined in this Privacy Policy.

Log in to your satu918 account and contact our support team via Live Chat or official email. Clearly state your request and provide the required identity verification details. We will process your request within 30 business days and deliver a copy of your data in a secure format.

When you close your account, satu918 will delete or anonymise your personal data that is no longer required. However, certain data — particularly financial records and KYC documents — must be retained for the period stipulated by Malaysian law (typically 5–7 years) before being permanently deleted.

Yes, you may unsubscribe from marketing emails at any time via the "unsubscribe" link found at the bottom of any promotional email, or through the notification settings in your account. Unsubscribe requests will be processed within 5 business days. Please note that you will still receive important account and security-related emails.

satu918 employs a multi-layered security approach encompassing AES-256 and TLS 1.3 encryption, enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), 24/7 security monitoring, regular penetration testing, and infrastructure hosted in ISO 27001-certified data centres. We also run a Bug Bounty programme to encourage security researchers to report any vulnerabilities discovered.

Register with Confidence — Your Data Is Always Safe at satu918

With the highest level of data protection and our commitment to member privacy, you can enjoy your gaming experience at satu918 with complete peace of mind. Register today and feel the difference.

AES-256 Encryption PDPA Compliant ISO 27001 TLS 1.3 24/7 Support
Bahasa Melayu