Privacy Policy

This Privacy Policy ("Policy") is issued by g118 ("g118", "Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://g118.cam and any associated mobile applications, sub-domains, or digital services (collectively, the "Platform").

This Policy describes how g118 collects, processes, stores, uses, and protects the personal data of individuals who register accounts, visit the Platform, contact customer support, or otherwise interact with our Services ("you", "your", "Player", "User"). It also sets out the rights available to you in relation to your personal data and the mechanisms through which you may exercise those rights.

By registering an account or using the Platform in any capacity, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and g118.

g118 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection laws and regulations. We apply privacy-by-design principles and limit data collection to what is strictly necessary for the purposes described herein.

The following definitions apply throughout this Privacy Policy:

g118 collects personal data through a variety of channels, including account registration, identity verification, payment processing, gameplay activity, customer communications, and technical interaction with the Platform. The categories of personal data we collect are detailed below.

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (required for age verification — our Services are restricted to players aged 21 and above)
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address and mobile phone number
• Account username and encrypted password
• Preferred language and communication preferences

3.2 KYC & Verification Documents

• Copies of government-issued photo identification (Malaysian MyKad, Passport, or Driver's License)
• Proof of residential address (utility bills, bank statements, or official correspondence dated within three months)
• Selfie photographs holding identification documents for liveness verification
• Screenshots or documentation confirming ownership of payment methods (where required)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts (in MYR), dates, and payment methods used
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX)
• Balance history, betting history, and gaming activity records
• Bonus and promotional participation records

3.4 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type, and version
• Session timestamps, login history, and access logs
• Cookie data and similar tracking technologies (see Section 8)
• Referral source and traffic attribution data

3.5 Communications Data

• Content and metadata of live chat support conversations
• Email correspondence between you and our support team
• Feedback, complaints, and dispute records
• Voluntary survey responses or promotional participation data

g118 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

g118 uses the personal data it collects for the following specific purposes:

5.1 Account Management & Service Delivery

To create and maintain your Player account; authenticate your identity on login; process deposits and withdrawals via your chosen Malaysian payment method; credit winnings, bonuses, and promotional rewards to your account; and deliver any other component of our Services that you access as a registered Player.

5.2 Identity Verification & Compliance

To conduct KYC verification of your identity and age before processing withdrawal requests or at any point required by applicable regulations; to screen against sanctions lists, politically exposed persons (PEP) databases, and fraud watchlists; and to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under applicable law.

5.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, multi-accounting, and other forms of prohibited conduct described in our Terms & Conditions. This includes automated monitoring of betting patterns, login activity, device fingerprinting, and payment behaviour.

5.4 Customer Support

To respond to enquiries, process complaints, resolve disputes, and provide technical assistance via live chat or email. Support interactions may be recorded for quality assurance and training purposes.

5.5 Platform Improvement & Analytics

To analyse aggregated usage data, performance metrics, and player behaviour patterns for the purpose of improving Platform features, game selection, user interface design, and overall service quality. Analytics data is processed in aggregated or anonymised form wherever possible.

5.6 Marketing Communications

Where you have provided explicit consent, to send you promotional communications about g118 offers, bonuses, new games, and platform updates via email or other channels. You may withdraw your consent to marketing communications at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

5.7 Responsible Gambling

To administer responsible gambling tools including deposit limits, session time reminders, cooling-off periods, and self-exclusion requests; to identify patterns of play that may indicate problem gambling behaviour; and to comply with our responsible gambling obligations as detailed in our Responsible Gambling Policy.

g118 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We may share personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

We share necessary transaction data with Malaysian payment processors and financial institutions — including but not limited to providers facilitating Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, and FPX transactions — strictly for the purpose of processing your deposits and withdrawals. These providers process data under their own privacy policies and are subject to applicable financial services regulations.

6.2 Identity Verification Partners

We may engage accredited third-party KYC and identity verification service providers to assist in verifying the identity and age of Players. These providers act as data processors under documented data processing agreements and are contractually prohibited from using your data for any purpose other than verification on our behalf.

6.3 Regulatory & Law Enforcement Authorities

We may disclose personal data to government authorities, regulatory bodies, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent required by applicable law and in accordance with applicable procedures.

6.4 Technology & Infrastructure Providers

We engage third-party technology partners for hosting, cloud infrastructure, platform security, analytics, and customer support tooling. These parties process personal data solely on our behalf, under contractual data processing agreements, and have no independent right to use or access your personal data.

6.5 Corporate Transactions

In the event of a merger, acquisition, business reorganisation, or sale of assets involving g118, personal data held by the Company may be transferred to a successor entity as part of the transaction, subject to equivalent privacy protections and prior notification to affected Players where reasonably practicable.

g118 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, or to resolve disputes and enforce our agreements. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data may be retained indefinitely for statistical or research purposes.

g118 uses cookies and similar technologies to operate the Platform, maintain your session, remember your preferences, and gather anonymous analytical data about how the Platform is used. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without disrupting core functionality.
• Functional Cookies: Used to remember your language preference, display settings, and other personalisation choices between sessions.
• Analytical Cookies: Used to collect aggregated, anonymised information about how Players navigate and interact with the Platform. This data helps us identify usability issues and prioritise Platform improvements.
• Marketing Cookies: Placed only with your explicit consent, to measure the effectiveness of our promotional campaigns and deliver relevant content. You may withdraw consent at any time.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use core Platform features, including account login and payment processing. For detailed browser-specific cookie management instructions, refer to your browser's help documentation.

g118 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Encryption in Transit: All data exchanged between your device and the Platform is encrypted using TLS/SSL protocols (256-bit encryption), ensuring that information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored on our servers, including passwords and payment identifiers, is encrypted at rest using industry-standard algorithms. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access Controls: Access to personal data within g118 is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
• Regular Security Audits: Our Platform and infrastructure undergo periodic security assessments and penetration testing by qualified third-party security specialists.
• Incident Response: g118 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players and relevant authorities within the timeframes required by applicable law.

g118 operates on an internationally distributed infrastructure. In the course of providing Services to Malaysian players, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable regulators;
• Contractual data transfer agreements with receiving entities that include binding obligations equivalent to those under applicable Malaysian data protection law;
• Transfers to third-party processors that have implemented internationally recognised data security standards and are bound by documented data processing agreements.

By using the Platform, you acknowledge that your personal data may be transferred, stored, and processed outside of Malaysia. g118 will at all times take reasonable steps to ensure that any such transfer is conducted lawfully and that your data remains protected to the standard described in this Policy.

As a data subject, you hold the following rights in relation to the personal data g118 holds about you. You may exercise any of these rights at any time by contacting our support team through the channels described in Section 15.

g118 will respond to all valid data subject requests within 30 calendar days of receipt. We may request proof of identity before acting on a request to prevent unauthorised disclosure. Where a request is complex or involves a large volume of data, we may extend the response period by a further 60 days, with prior written notice.

The g118 Platform and all associated Services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we become aware or have reasonable grounds to believe that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will immediately suspend the relevant account, initiate investigation procedures, and take steps to delete the associated personal data as expeditiously as possible in accordance with applicable law.

If you are a parent or guardian and believe that a minor may have registered an account or provided personal data to g118, please contact our support team immediately. We take the protection of minors very seriously and will act promptly on any verified reports.

The g118 Platform may contain references or links to third-party websites or services, including but not limited to payment provider portals (such as Maybank2u or Touch 'n Go eWallet) that open in a separate browser window or redirect you outside the Platform. This Privacy Policy applies solely to the g118 Platform and does not extend to any third-party websites, applications, or services.

g118 is not responsible for the privacy practices, data handling, or content of any third-party platforms. We encourage you to review the privacy policies of any third-party services you access in connection with your use of g118, including your chosen payment provider.

g118 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The date of the most recent revision is indicated at the top of this page.

Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide reasonable advance notice to registered Players via in-Platform notification or email to the address associated with your account, at least 14 days prior to the changes taking effect.

Your continued use of the Platform after the effective date of any amendments constitutes your acknowledgement and acceptance of the revised Policy. If you do not agree with the revised terms, you must cease using the Platform and contact support to close your account before the amendments take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by g118, please contact our Data Protection team through any of the following channels: