Malaysia PDPA Data Protection

Privacy Policy 118i – Our Commitment to Protecting Your Personal Data

Your personal data is a trust we take seriously. Learn how 118i collects, uses and protects your information in compliance with Malaysia's Personal Data Protection Act (PDPA).

Updated: 1 January 2026

118i's Core Commitments to Protecting Your Privacy

Six core principles that define how 118i manages and protects the personal information of every member in Malaysia.

🔒
256-Bit SSL Encryption
All data transmitted between your device and 118i's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions, including Maybank and CIMB. No third party can intercept or read your data in transit.
🇲🇾
Malaysia PDPA Compliance
The 118i Privacy Policy is designed to be fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data genuinely necessary for the platform's operation, process it in a fair and transparent manner, and give you, as the data owner, the right to control it.
🚫
No Sale of Data to Third Parties
118i has never and will never sell, rent, or share members' personal information with third parties for marketing purposes. Your data belongs to you. We only share data under limited circumstances and for legitimate purposes, as clearly stated in this Privacy Policy.
🗑️
Right to Data Erasure
As a 118i member, you have the right to request the deletion of your personal data from our systems. Such requests can be submitted to the 118i customer support team and will be processed in accordance with Malaysia's PDPA requirements within the stipulated timeframe, subject to any statutory record-keeping obligations.
🔍
Full Transparency in Data Use
118i believes you have the right to know exactly what data we collect, what it is used for, and how long it is retained. This Privacy Policy is written in clear, straightforward language — not confusing legal jargon — so that every Malaysian member can make informed decisions about their data.
🛡️
24/7 Security Monitoring
118i's data systems and infrastructure are monitored around the clock, 24 hours a day, 7 days a week, by our technical security team. Any suspicious activity or unauthorised access attempts are detected and addressed immediately to safeguard the personal data of all members on our platform.
Official Documents

Full Privacy Policy of the 118i Platform

This Privacy Policy document ("Policy") describes how the 118i platform ("118i", "we", "our platform") collects, uses, stores, protects and discloses your personal information when you access or use our services. This Policy applies to all registered members, website visitors and any individual who interacts with the 118i platform in any capacity.

At 118i, we understand that your trust in us goes beyond the security of your funds — it also means trusting that your personal information is handled responsibly and transparently. This Privacy Policy is written in plain, accessible language because we want every Malaysian member to genuinely understand their rights and how we manage their data, rather than simply having a lengthy legal document that no one reads.

Acceptance of This Privacy Policy

By registering an account or using any part of the 118i platform, you confirm that you have read and agree to this Privacy Policy. This Policy should be read together with Terms & Conditions for a full understanding of the agreement between you and 118i.


1 Introduction & Scope of This Privacy Policy

118i is a digital entertainment platform operating in Malaysia, offering slots, Live Casino, Sports Betting and related entertainment services to registered members. In running our platform, 118i acts as a data controller responsible for processing members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all personal information that 118i collects through: the official 118i website at 118i.my; the 118i mobile app for Android and iOS; interactions with the 118i customer support team via live chat, email or phone; and any other communication channels 118i uses to engage with members and prospective members.

This Policy does not apply to third-party websites or platforms that may link to or from the 118i platform. We encourage you to read the privacy policy of any third-party website you visit via links within our platform, as 118i is not responsible for the privacy practices of those platforms.


2 Types of Personal Data We Collect

118i only collects personal data that is strictly necessary to deliver our platform services safely, fairly, and efficiently. Below are the categories of data we collect and the purposes for which they are collected:

Data Category Specific Data Examples Primary Purpose
Identity Data Full name, national identity card (IC) number, date of birth, photograph Account registration, KYC verification, AML legal compliance
Contact Details Malaysian phone number, email address, state of residence Account communications, OTP verification, customer support
Financial Data Payment methods (TnG, GrabPay, DuitNow, FPX), transaction history, total deposit and withdrawal amounts in MYR Transaction processing, payment verification, fraud prevention
Gaming Data Game history, bets, winnings, game preferences, active sessions Account management, responsible gaming, service improvement
Technical Data IP address, device type, operating system, web browser, cookie data Platform security, fraud detection, performance optimisation
Communication Data Customer support chat records, emails sent to 118i Complaint resolution, service quality improvement

Sensitive Data: 118i does not collect sensitive information such as your health data, religious beliefs or political views. However, in the context of responsible gaming, we may retain information relating to self-imposed gaming limits or self-exclusion status that you have set within our platform.


3 How We Use Your Personal Data

The personal data 118i collects is used solely for the legitimate, stated purposes below. We do not use your data for any other purpose without first obtaining your consent:

  • Account Management: Creating, verifying, maintaining and securing your 118i account, including KYC identity verification and processing your RM winnings withdrawal requests.
  • Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and FPX, and handles your winnings withdrawals securely and accurately.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering and misuse of the 118i platform that could harm other members or the platform as a whole.
  • Legal Compliance: Fulfilling Malaysia's legal obligations, including PDPA requirements, anti-money laundering (AML) laws, and directives from the relevant authorities.
  • Service Improvement: Analysing platform usage patterns on an aggregated and anonymised basis to improve performance, the user interface and the overall gaming experience at 118i.
  • Service Communications: Sending you important notices regarding your account, changes to our Terms & Conditions or Privacy Policy, and critical security information via email or SMS.
  • Customer Support: Resolving enquiries, complaints, and assistance requests submitted to the 118i support team via 24/7 live chat or email.
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may need assistance and providing appropriate responsible gaming support.

Should 118i wish to use your data for a new purpose that differs from those stated above, we will notify you in advance and obtain your consent where required by applicable law.


4 Data Sharing with Third Parties

118i never sells, rents or trades members' personal data to any third party for commercial marketing purposes. Data sharing occurs only in the following limited and lawful circumstances:

Technical Service Providers

Third-party companies that assist 118i in operating the platform's technical infrastructure — including cloud service providers, Malaysian payment gateway providers and cybersecurity service providers. All such providers are bound by strict data protection agreements and may only use your data for purposes expressly defined by 118i.

Malaysian Legal Requirements

118i may be required to disclose member personal data to the relevant Malaysian authorities — including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the courts — when compelled to do so by law, court order, or in the context of a legitimate criminal investigation. 118i will not disclose more data than is required by law.

Sharing with Your Consent

In certain situations, 118i may seek your consent to share your personal data with specific parties for a particular purpose. Such sharing will only take place once you have given your explicit consent, which may be withdrawn at any time.

Fraud Prevention & Security

In serious cases — such as suspected significant fraud or security threats involving your account — 118i may need to share limited information with relevant parties, such as payment gateway providers or authorities, to protect your interests and those of other members on our platform.

Our Guarantee: 118i has never and will never share members' personal information with third-party marketing companies, social media platforms or advertisers for targeted advertising purposes. Your data is not a product we sell — it is information you have entrusted to us for specific purposes, and we honour that trust.


5 Data Security Measures at 118i

118i continually invests in state-of-the-art security infrastructure to ensure your personal data is protected to the highest possible standard. The following are the key security measures we employ:

  • 256-bit SSL Encryption: All communications between your web browser or app and 118i's servers are encrypted using 256-bit SSL technology, making your data unreadable to anyone who may intercept your connection.
  • Strictly Secured Servers: 118i member data is stored in secured data centres accessible only to staff with specific authorisation and subject to strict identity verification processes.
  • Real-Time Threat Monitoring: 118i's security monitoring system operates 24 hours a day to detect and respond to any cyber threats or unauthorised access attempts in the shortest time possible.
  • Internal Access Controls: Access to member personal data within the 118i system is restricted to staff with a legitimate operational need only. All staff are bound by confidentiality agreements and undergo regular data privacy training.
  • Two-Factor Authentication (2FA): 118i provides and encourages the use of two-factor authentication for all member accounts, adding an extra layer of protection against unauthorised access even in the event that your password is compromised.
  • Regular Security Audits: 118i's systems and infrastructure undergo regular internal and external security audits to identify and address vulnerabilities before they can be exploited by malicious parties.

Clean Record: Throughout 118i's operating history, there has not been a single reported incident of a data breach or member account security compromise. This is an achievement we are extremely proud of and will continue to uphold through sustained investment in our platform's security.

While we take all reasonable steps to protect your data, please note that no security system can guarantee 100% protection under all circumstances. You also play an important role in keeping your account secure — please safeguard your password and never share it with anyone.


6 Cookies, Tracking Technologies & Analytics

The 118i platform uses cookies and similar tracking technologies to enhance user experience and platform security. Below is an explanation of the types of cookies we use:

  • Essential Cookies (Mandatory): These cookies are essential for the core functions of the 118i platform, such as maintaining your login session, remembering your language preference and ensuring your financial transactions are processed correctly. The 118i platform cannot function properly without these cookies.
  • Performance & Analytics Cookies: 118i uses analytics data collected in aggregate and anonymised form to understand how members use our platform. This helps us identify areas for improvement and ensure the platform performs optimally across all devices.
  • Functional Cookies: These cookies remember your preferences and settings within the 118i platform — such as your favourite games, default bet size and display preferences — so you do not have to reconfigure them each time you log in.
  • Security Cookies: Used to detect suspicious activity, prevent fraud and protect your account from unauthorised access. These cookies form part of 118i's multi-layered security system.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the 118i platform, including your ability to log in to your account or carry out financial transactions securely.


7 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act (PDPA) and 118i's Privacy Policy, you have the following rights in relation to the personal data we hold about you:

Right of Access
You have the right to request a copy of the personal data 118i holds about you. Data access requests can be submitted to 118i customer support and will be processed within 21 business days in accordance with Malaysia's PDPA requirements.
Right to Rectification
If you find that the personal data 118i holds about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your 118i account settings.
Right to Erasure
You may request the deletion of your personal data from 118i's systems, subject to legal record-keeping obligations. Data required for AML compliance or financial transaction records may need to be retained for the period prescribed by Malaysian law.
Right to Object
You have the right to object to 118i's processing of your personal data under certain circumstances. If your objection is upheld and there are no overriding legitimate interests, 118i will cease processing the relevant data.
Right to Data Portability
You have the right to receive the personal data 118i holds about you in a machine-readable format (such as CSV or JSON), allowing you to transfer or make use of that data with ease whenever needed.
Right to Restrict Processing
Under certain circumstances, you may request that 118i restrict the processing of your personal data while a dispute or investigation relating to your data is being resolved. 118i will comply with such requests provided they do not conflict with our legal obligations.
How to Exercise Your Rights

To submit any request relating to your personal data rights, please contact the 118i Data Protection Officer (DPO) by email at [email protected] or via the in-platform live chat. Clearly state the nature of your request and provide the necessary information for us to verify your identity before processing it. We are committed to responding to all requests within 21 business days in accordance with Malaysia's PDPA requirements.


8 Personal Data Retention Period

118i does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy. The following are general guidelines on our data retention periods:

  • Active Account Data: For as long as your account remains active with 118i, we retain all relevant personal data in order to provide our services to you.
  • Data Following Account Closure: After your account is closed, 118i will retain your personal data for the minimum period required under applicable Malaysian law — typically between 5 and 7 years for financial records, in accordance with tax and AML legal requirements.
  • Financial Transaction Data: Records of all transactions — including deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, and other methods — are retained for a minimum of 7 years in accordance with Malaysia's financial legislation.
  • Communication Data: Customer support conversation records are retained for 3 years for complaint resolution and service quality improvement purposes, after which they are deleted or anonymised.
  • Security Log Data: Security logs and system access records are retained for 12 months for threat detection and digital forensics purposes where required.

Once the relevant retention period has ended and there is no legal requirement to keep the data, 118i will securely delete or anonymise your personal data using industry-approved data deletion procedures.


9 Changes to This Privacy Policy

118i reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements in how we protect your data. The "Updated" date displayed at the top of this page will always reflect the latest version of the Privacy Policy.

For material and significant changes to how we use or protect your data, 118i will endeavour to notify you in advance via an in-platform notice or an email to your registered address. Nevertheless, you are encouraged to check this page periodically to ensure you are always aware of the latest version of 118i's Privacy Policy.

Your continued use of the 118i platform following the publication of any changes to this Privacy Policy will be deemed as your acceptance of the updated version. If you disagree with the changes made, you have the right to close your account and request the deletion of your personal data in accordance with the rights set out in Section 7 above.


10 Contact Us – 118i Data Protection Officer

If you have any questions, concerns or complaints regarding how 118i handles your personal data, or if you wish to exercise any of the data rights outlined in this Privacy Policy, please contact our Data Protection Officer through the following channels:

  • Official Email: [email protected] (subject: Privacy Policy Enquiry)
  • Live Chat: Available 24/7 in Bahasa Malaysia via the 118i platform
  • Email Response Time: Within 24 working hours
  • Data Rights Request Response Time: Within 21 business days in accordance with Malaysia's PDPA

If you are dissatisfied with how 118i has handled your privacy complaint after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set out under the PDPA 2010.

Related Documents

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Guide 118i for a full understanding of your rights and responsibilities as a member of our platform. Together, these three documents form the comprehensive protection framework that 118i offers to all its members.

Why Privacy Matters at 118i

Why 118i Takes Your Personal Data Protection Seriously

There is something we often overlook in this digital age — just how valuable our personal information truly is. When you sign up on any online platform and fill in your name, phone number, and payment details, you are placing an enormous amount of trust in that platform. At 118i, we fully understand the weight of that responsibility.

Picture this: you're playing your favourite slots — perhaps Gates of Olympus or Dragon Scroll — while watching a live EPL match on the weekend. You deposit via Touch 'n Go eWallet, play a few sessions, win, and then request a withdrawal through DuitNow. Throughout that entire process, how much personal and financial information have you shared with the platform? Your name, phone number, account number, transaction details — all of it. And every piece of that information needs to be fully protected.

That is why 118i does not treat data protection as merely a compliance checkbox. For us, safeguarding member privacy is a core value that defines who we are as a platform. We believe that Malaysian players deserve to enjoy their entertainment in a digital environment that is safe not only in financial terms, but also in the protection of their personal data.

In Malaysia's current digital landscape, data breaches and the unauthorised sale of personal information have become a growing concern. Many Malaysians have experienced receiving unsolicited marketing calls or messages from companies they never directly shared their details with — a clear sign that their data had been sold or shared without their knowledge. At 118i, we are committed to never being part of that chain.

118i's investment in data security does not come cheap. 256-bit SSL encryption, a 24/7 real-time threat monitoring system, regular security audits and a tightly secured server infrastructure all require substantial resources. But for 118i, this is a non-negotiable investment — because it concerns something fundamental: the trust of our members.

We also recognise that a sound Privacy Policy is not only about protecting data from external threats — it is equally about robust internal controls. At 118i, access to members' personal data is strictly limited to staff who genuinely require it to carry out their duties. A customer support agent, for instance, does not have access to a member's full financial information — and that is exactly how it should be.

Finally, we would like to express our sincere gratitude to every 118i member who has placed their trust in our platform. That trust is our greatest motivation to continually improve and strengthen our privacy protection systems. Every time you deposit using GrabPay or ShopeePay, every time you spin your favourite slots, and every time you withdraw your winnings – know that your data is protected with every ounce of commitment we can give.

FAQ – 118i Privacy Policy

Answers to the questions Malaysian members ask most frequently about how 118i protects and manages their personal data.

Absolutely not. 118i has never sold, rented or shared members' personal information with any marketing company, advertising platform or third-party data broker for targeted advertising purposes. This is one of our core commitments that we have never compromised since the platform launched. The only circumstances in which 118i shares data with third parties are: first, with technical service providers that support our platform's operations (such as Malaysian payment gateway providers) who are bound by strict data protection agreements; second, when required by Malaysian law or a valid court order; and third, with your explicit consent. If you have ever received unsolicited marketing communications that appear to relate to your online gaming activity, these did not originate from 118i, and you are advised to report them to the relevant authorities.

You may request the deletion of your personal data from 118i's systems by contacting our Data Protection Officer via email at [email protected] with the subject line "Data Deletion Request", or through our in-platform 24/7 live chat. Please provide your full name and account number in your request so we can verify your identity before processing it. Please note that this right to erasure is subject to certain important legal exceptions: financial transaction data — such as deposit history via Touch 'n Go, GrabPay or DuitNow, and RM withdrawal records — must be retained for a minimum of 7 years in accordance with Malaysia's financial and AML legal requirements. Data required to resolve any outstanding disputes or ongoing legal obligations must also be retained until those matters are concluded. Once we have verified your request and processed the deletion of eligible data, we will notify you within 21 business days as required under Malaysia's PDPA.

When your account is closed or suspended — whether at your own request or by 118i's decision — your personal data is not immediately deleted from our systems. Instead, we retain it for the periods required under applicable Malaysian law. This includes financial transaction records (deposits, withdrawals in MYR, gaming history), which must be kept for the purposes of compliance with Malaysia's financial and tax laws. Communication data such as customer support records is retained for a shorter period — typically 3 years — before being anonymised or deleted. Your identity and account information is held under restricted access and can only be accessed by authorised staff for legal compliance purposes or to resolve disputes that may arise following account closure. Once the relevant retention period has elapsed, your data will be securely deleted from all 118i systems. If you would like to know more about the specific data we retain about you after account closure, please contact our support team.

118i does not store your full bank card details, bank account numbers or e-wallet login credentials (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and others) in our systems. When you make a deposit or withdrawal through any supported Malaysian payment method, the transaction is processed via a secure, certified third-party payment gateway. Only anonymised transaction tokens or payment references are stored in the 118i system for record-keeping and dispute resolution purposes — not your full payment details. This means that even in the unlikely event of a security breach (which has never occurred in 118i's history), your complete payment information would not be accessible to any unauthorised party. You also need not worry about 118i customer support staff being able to view your bank account number or e-wallet password — they simply do not have access to that information.

118i Security & Data Protection Track Record

Figures that reflect 118i's unwavering commitment to protecting the privacy and personal data of every Malaysian member.

Platform Data Security Performance
Zero Data Breach Record (Since Inception)100%
Data Rights Requests Resolved Within 21 Days99.8%
Security System Uptime (12 Months)99.97%
Malaysia PDPA Compliance100%
Privacy Complaints Resolved Satisfactorily97.5%
Malaysia PDPA Compliance – More Than Just a Formality

118i views compliance with Malaysia's Personal Data Protection Act 2010 not merely as a legal obligation, but as a minimum standard we continually strive to exceed. We regularly review and update our privacy practices to ensure they remain aligned with — or go beyond — the latest PDPA requirements.

End-to-End Encryption for All Transactions

Every financial transaction at 118i — from deposits via Boost or ShopeePay to withdrawals through Maybank2u or CIMB Clicks — is secured with end-to-end encryption, ensuring your financial details remain inaccessible to any unauthorised party at every stage of the transaction.

Strict Internal Access Controls

Access to 118i member personal data within our systems operates on a "need-to-know" basis — only staff with a legitimate operational need may access the relevant data, and all access is logged and monitored by our internal audit system.

🔒

Play with Peace of Mind – Your Data Is Safe with 118i

Now you know exactly how 118i protects your privacy and personal data. Register today and enjoy a safe, fair and transparent gaming experience alongside more than 500,000 Malaysian players who already trust 118i. Claim your RM100 welcome bonus to kick off your journey!

SSL 256-bit Privacy Protection
Malaysia PDPA Compliance
No Data Sales
24/7 Support

* By registering, you agree to the Terms & Conditions and this Privacy Policy. Please observe Responsible Gaming. For users aged 18 and above only.

Documents & Other Important Information

Terms & Conditions

Read the full terms of use for the 118i platform, including conditions on registration, deposits, withdrawals, bonuses, and game rules.

Read Terms & Conditions
Responsible Gaming

A complete guide to playing safely and responsibly at 118i, including self-imposed deposit limit tools and self-exclusion options.

Learn More
FAQ

Answers to the most frequently asked questions by 118i members on accounts, deposits, withdrawals, bonuses, and games.

View FAQ
Bahasa Melayu