Candy 918 Privacy Policy — Malaysian Member Data Protection

1Introduction

Candy 918 is an online casino and betting platform operating in Malaysia. We are committed to protecting the privacy and security of every member's personal information on our platform. This Privacy Policy has been drawn up to comply with the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia and international data protection standards.

When you register an account with Candy 918, using our services, or simply browsing our website, you may share certain personal information with us. We understand how important your trust is, and we want to make sure you know exactly how your data is handled — from start to finish.

2Personal Data We Collect

When you interact with the Candy 918, we may collect various types of personal information depending on how you use our platform. Below are the categories of data we collect:

3How We Collect Your Data

Candy 918 collects your personal information through several different channels:

• Account Registration — When you complete the registration form on the platform Candy 918, you provide us directly with basic details such as your name, email address, and phone number.
• KYC Process (Identity Verification) — To meet legal compliance requirements, we may request a copy of identity documents such as your MyKad or passport for verification purposes.
• Financial Transactions — Every time you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, your transaction details are automatically recorded for security and compliance purposes.
• Platform Usage — Automated tracking technologies such as cookies, web pixels, and server logs record how you interact with the platform Candy 918.
• Customer Communications — Your interactions with our support team via live chat, email, or phone are recorded for quality control and reference purposes.

4Purpose of Personal Data Use

Personal data collected by Candy 918 used for the following legitimate and transparent purposes:

• Account Management — Creating, verifying, and managing your member account on the platform Candy 918.
• Transaction Processing — Processing your deposits and withdrawals securely and accurately through legitimate Malaysian payment methods.
• Legal Compliance — To meet AML (Anti-Money Laundering), KYC, and other compliance requirements set by Malaysian authorities.
• Platform Security — Detecting and preventing fraud, money laundering, and suspicious activity on the platform Candy 918.
• Service Improvement — Analysing usage patterns to improve the gaming experience, platform speed, and new features.
• Service Communications — Sending important notifications related to your account, transactions, system updates, and relevant promotions.
• Customer Support — Resolving complaints, responding to enquiries, and providing technical assistance to members Candy 918.
• VIP Rewards Programme — Calculating reward points, determining VIP tier, and managing the benefits members are entitled to.

5Data Sharing & Disclosure

Candy 918 does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may need to share information with the following parties:

• Payment Service Providers — Parties such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX / Malaysian banks receive only the transaction details necessary to process your payment.
• Technical Service Providers — Companies providing server infrastructure, cloud services, and analytics tools may access data in their capacity as data processors, subject to strict confidentiality agreements.
• Legal Authorities — Candy 918 will disclose the necessary information to Malaysian authorities or regulatory bodies when required by law, court order, or valid legal process.
• Audit & Compliance Partners — Independent auditors and recognised compliance bodies may be granted limited access to data for the purposes of game fairness audits and financial compliance.

6Data Security

Candy 918 implements robust technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure.

• 256-bit SSL Encryption — All data transmitted between your device and the server Candy 918 protected by bank-grade Secure Socket Layer (SSL) encryption.
• Strict Access Controls — Only authorised personnel with a legitimate need may access members' personal data, and every instance of access is logged for audit purposes.
• 24/7 Monitoring — Our security systems operate around the clock to detect and respond to any threats or suspicious activity.
• Data Backup — Personal data is securely backed up on a regular basis to ensure service continuity and data recovery in the event of an incident.
• Regular Security Testing — We conduct regular penetration testing and vulnerability assessments to identify and address potential system weaknesses.

7Use of Cookies

Platform Candy 918 uses cookies and similar tracking technologies to enhance the user experience and understand platform usage patterns. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use on Candy 918:

• Essential Cookies — Required for core platform functions such as login, game sessions, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects statistical information on how members use the platform Candy 918 to help us improve the performance and usability of the website.
• Preference Cookies — Saving your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytical Cookies — Helping us understand which pages are most popular, how users navigate the platform, and where improvements are needed.

You can control or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the platform Candy 918 yours.

8Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights regarding your personal data held by Candy 918. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact us at support@candy918.my. We will process your request within 14 business days.

9Data Retention Period

Candy 918 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required under applicable Malaysian law.

• Active Account Data — Retained for as long as your account remains active on the platform Candy 918 and for a specified period following account closure.
• Financial Transaction Records — Retained for a minimum of seven (7) years in accordance with Malaysian accounting regulations and AML compliance requirements.
• Communication Records — Customer support conversation records are retained for two (2) years for quality control purposes and as a reference in the event of a dispute.
• Technical Log Data — System logs and technical data are retained for ninety (90) days before being automatically deleted.

10Links to Third-Party Sites

Platform Candy 918 may contain links to third-party websites such as game providers or sports news portals. This Privacy Policy applies solely to the Candy 918 and does not cover the privacy practices of any other websites.

We are not responsible for the content or privacy practices of third-party websites. We encourage you to read the Privacy Policy of each website you visit separately before providing them with any personal information.

11Changes to the Privacy Policy

Candy 918 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the technology we use. Members will be notified of any material changes via:

• In-platform notifications Candy 918 at login
• Email to the address registered to your account
• Updating the "Last Updated" date at the top of this page

Continued use of the platform Candy 918 following any changes to this Privacy Policy taking effect will be deemed as your acceptance of the amended Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

12Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Candy 918, please do not hesitate to get in touch with us:

• Email: support@candy918.my
• Live Chat: Available 24/7 via the platform Candy 918
• FAQ: Visit our FAQ page