Privacy Policy – How happy918 Protects Your Data

1. Introduction

happy918 ("we", "us", "our") operates the online gaming platform accessible at happy918.co and is committed to protecting the privacy and personal data of all players and visitors ("you", "your"). This Privacy Policy sets out the basis on which personal data collected from you, or provided by you, will be processed by happy918.

This Privacy Policy applies to all users of the happy918 platform, including registered account holders and unregistered visitors. It should be read alongside the happy918 Terms & Conditions. By using the happy918 platform, you acknowledge that you have read and understood this Privacy Policy.

happy918 processes personal data in accordance with its international gaming licensing obligations and applicable data protection frameworks. We take our data protection responsibilities seriously and have implemented technical and organisational measures designed to safeguard the personal information of our Malaysian and international players.

2. Data We Collect

happy918 collects the following categories of personal data:

2.1 Registration Data. When you create a happy918 account, we collect your full name, date of birth, email address, mobile phone number, residential address, and the username and password you choose. This information is necessary to open and administer your account.

2.2 Identity Verification Data. As part of our KYC obligations, we may collect copies of identity documents such as your national identification card (MyKad), passport, or a recent utility bill or bank statement as proof of address. This data is required before withdrawals are processed and may be requested at any time in compliance with our licensing requirements.

2.3 Financial Data. happy918 collects information about your deposit and withdrawal transactions, including payment method details (such as Touch n Go eWallet account identifiers, Boost account identifiers, or bank account numbers), transaction amounts, and timestamps. We do not store full card numbers or full bank account numbers on our servers.

2.4 Gaming Activity Data. We collect records of all wagers, game sessions, bet histories, and bonus interactions conducted through your happy918 account. This data is used for account administration, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Device and Technical Data. We automatically collect certain technical information when you access the happy918 platform, including your IP address, device type and operating system, browser type and version, session duration, and pages visited. This data supports fraud prevention, security monitoring, and platform performance optimisation.

2.6 Communications Data. If you contact happy918 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.

3. How We Use Your Data

happy918 uses your personal data for the following purposes:

• Account Administration: Creating, maintaining, and managing your happy918 account, including processing deposits and withdrawals.
• Identity Verification: Complying with KYC, AML, and age verification obligations required under our international gaming licence.
• Platform Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct.
• Regulatory Compliance: Meeting reporting obligations to our licensing authority, including transaction reporting and suspicious activity reporting where required by law.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying self-exclusion tools, deposit limits, or intervention measures where appropriate.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Platform Improvement: Analysing aggregated, anonymised usage data to enhance the performance, reliability, and user experience of the happy918 platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant platform updates where you have provided consent or where permitted under applicable law. You may opt out of marketing communications at any time through your account settings.

4. Legal Basis for Processing

happy918 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform our agreement with you under the happy918 Terms & Conditions, including account administration and payment processing.
• Legal Obligation: Processing required to comply with our licensing conditions, AML regulations, KYC requirements, and applicable data protection and financial crime laws.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and internal analytics, where our legitimate interests are not overridden by your rights.
• Consent: Where we rely on your consent for processing activities such as marketing communications, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

5.1 happy918 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks.

5.2 We may share your personal data with the following categories of third parties where necessary:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers require transaction data to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC and identity verification providers who process your identity documents on our behalf under binding data processing agreements.
• Gaming Software Providers: The game studios and platform providers whose software powers the happy918 casino and sportsbook may receive anonymised session data for game integrity and technical support purposes.
• Regulatory Authorities: Our licensing authority and applicable government bodies where disclosure is required by law, court order, or regulatory mandate.
• Professional Advisers: Lawyers, accountants, and auditors under strict confidentiality obligations where required for legal or financial compliance.

5.3 All third-party processors are required to process your data in accordance with applicable data protection law and are bound by contractual obligations to maintain the security and confidentiality of your data.

6. Cookies & Tracking Technologies

happy918 uses cookies and similar tracking technologies to enable core platform functionality. Our cookie use is limited to:

• Session Cookies: Necessary for maintaining your logged-in state and game session continuity. These expire when you close your browser.
• Authentication Cookies: Used in conjunction with the "Remember Me" feature to maintain your login state across sessions on trusted devices.
• Security Cookies: Used for fraud detection, CSRF protection, and identifying unusual login patterns.
• Analytics Cookies: First-party analytics cookies that collect anonymised data about page visits and feature usage to help us improve the platform.

happy918 does not deploy third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies on the platform. You may manage or disable non-essential cookies through your browser settings, though this may impact certain platform functionality.

7. Data Security

happy918 implements a multi-layered security programme to protect your personal data:

• All data transmitted between your device and the happy918 platform is encrypted using TLS 1.2 or higher.
• Sensitive personal data stored on our servers is encrypted at rest using AES-256 or equivalent standards.
• Access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls and audit logging.
• We conduct regular security assessments, vulnerability scans, and penetration tests of our platform infrastructure.
• Employees with access to personal data undergo data protection training and are subject to confidentiality obligations.

While we take all reasonable precautions, no internet transmission or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, happy918 will notify affected individuals and relevant authorities in accordance with applicable law.

8. Data Retention

happy918 retains your personal data for the following periods:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our licensing and AML compliance obligations.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years to comply with financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support Communications: Customer support records are retained for three (3) years unless retention is required for ongoing dispute resolution or legal proceedings.
• Technical and Log Data: Server logs and device data are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised unless continued retention is required by law.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by happy918:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data in specific circumstances.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.

To exercise any of these rights, contact happy918 customer support via live chat or at [email protected]. We will respond to all verifiable requests within thirty (30) days.

10. Children's Privacy

The happy918 platform is strictly intended for persons aged 21 years and over. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that a minor has provided personal data, we will promptly delete the data and close the associated account. If you believe a minor has registered on the happy918 platform, please contact our support team immediately.

11. International Data Transfers

happy918's infrastructure and some of our third-party service providers operate in jurisdictions outside Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your data to a standard equivalent to that required under applicable data protection law.

12. Policy Updates

happy918 reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the happy918 platform following any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact the happy918 Data Protection team via 24/7 live chat on the platform. For written enquiries, contact us at: [email protected]. Please do not include sensitive account information or financial details in email correspondence.