18650 Privacy Policy – Personal Data Protection for Users
This Privacy Policy explains how the 18650 platform collects, uses, stores, and protects the personal data of users in Malaysia. We are committed to safeguarding your information and upholding responsible data management practices.
Updated: 2026 | Applicable to all 18650 platform users in Malaysia
1. Information We Collect
When you register or use the 18650 platform, we collect several categories of information for operational, security, and service improvement purposes. The types of information collected are as follows:
Account Information
- Full name, date of birth, and ID card number (for verification)
- Email address and mobile phone number
- Username and password in encrypted format
- Identity verification documents uploaded
Payment Information
- Bank account number for deposit and withdrawal purposes in MYR (RM)
- Deposit and withdrawal transaction history
- Selected payment method (DuitNow, local bank transfer)
- Transaction records associated with your account
Device & Browser Information
- Device type, operating system, and browser version
- IP address and approximate location based on IP
- Screen resolution and device language settings
- Login session time and duration
Platform Usage Data
- Pages visited and time spent in each section
- Betting records and games played
- Clicks, searches, and in-platform interactions
- Error logs and technical diagnostic information
2. How We Use Your Information
18650 uses collected information solely for legitimate purposes necessary to operate the platform. We do not sell or rent users' personal data to any third party for marketing purposes.
The information collected is used for the following purposes:
- Identity and account verification – verifying that users meet the minimum age requirement of 18 years and satisfy registration requirements
- Financial transaction processing – enabling deposits and withdrawals in MYR to be processed accurately and securely
- Account security – detecting suspicious activity, unauthorised login attempts, and protecting user funds
- Customer support – enabling the 18650 support team to effectively assist with issues or enquiries
- Platform improvements – analysing usage patterns to improve the interface and experience for Malaysian users
- Regulatory compliance – meeting reporting and compliance requirements as prescribed by applicable law
3. Cookie Usage & Session Tracking
The 18650 platform uses cookies and similar session-tracking technologies to ensure smooth platform functionality and deliver a better experience for Malaysian users.
Session cookies are used to maintain your logged-in state while using the platform, so you do not need to log in repeatedly within an active session. Preference cookies store your language settings and display preferences so they do not need to be reconfigured each time you visit.
Analytics cookies are used to understand how users interact with the platform — for example, which pages are visited most frequently or where users encounter difficulties. This information is used for technical improvements and is not used to personally identify any individual.
You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the platform.
4. Data Storage, Security & Information Sharing
Data Storage & Security
All 18650 user data is stored on servers protected with industry-standard encryption. Connections between your device and the platform use SSL protocol to ensure data cannot be intercepted in transit. Account passwords are stored in a hashed format that cannot be read directly.
Financial data, including bank account information and transaction records in MYR, is protected with additional security layers and restricted to staff who require access for legitimate operational purposes. We conduct regular security reviews to identify and address any system vulnerabilities.
Sharing of Information with Third Parties
18650 does not sell or share users' personal data with third parties for marketing purposes. Information may only be shared with the following parties under specific circumstances where it is necessary:
- Payment processor – transaction information required to process deposits and withdrawals in RM is shared only with trusted payment processors bound by strict confidentiality agreements
- Competent authorities – where required by law or a valid court order, 18650 may be obligated to disclose certain information to the relevant authorities
- Technical service provider – companies providing hosting, security, or technical analytics services that require limited access to certain data for operational purposes only
5. User Rights & How to Contact Us
Your Rights as a User
As a user of the 18650 platform, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. Requests will be processed within 14 business days.
If your information is inaccurate or incomplete, you may request a correction via your account settings or through customer support.
You may request the deletion of your account and personal data, subject to financial record retention requirements as prescribed by law.
Changes to the Privacy Policy
18650 reserves the right to update this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or platform improvements. Registered users will be notified of any material amendments via in-platform notifications. The "Updated" date at the top of this document will always reflect the latest version.
Contact Our Team
For any enquiries, data access requests, or privacy concerns, please reach out to the 18650 support team. We operate 24 hours a day and can be contacted via live chat on the platform or by email at [email protected]. You may also refer to the FAQ for answers to general questions about privacy and data security.
Further Questions About Your Data Privacy?
The 18650 support team is ready to help you understand how your data is managed and to handle any account or privacy-related requests.