Privacy Policy

1. Introduction

kor18plus (hereinafter referred to as "kor18plus", "we", "us", or "our") operates the online betting and casino entertainment platform accessible at https://kor18plus.cam (the "Platform"). This Privacy Policy sets out in clear terms how kor18plus collects, processes, stores, shares, and protects the personal data of users (hereinafter referred to as "you", "your", or "the User") who access or use our Platform and associated Services.

We are committed to handling personal data responsibly, transparently, and in full accordance with applicable data protection legislation. By registering an Account on the Platform or by continuing to use our Services following the effective date of this Policy, you acknowledge that you have read and understood its contents and consent to the data processing activities described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform, and our Responsible Gambling Policy, which addresses the safeguards we have in place for player welfare.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" refers to kor18plus, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means a third party that Processes Personal Data on behalf of kor18plus under a contractual arrangement.
• "Account" means a registered user account on the kor18plus Platform.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance prior to processing withdrawals or as otherwise necessitated by anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform for session management, analytics, and personalisation purposes.
• "AML" means Anti-Money Laundering — the legal framework and procedures kor18plus follows to detect and prevent the use of the Platform for financial crimes.

3. Personal Data We Collect

kor18plus collects Personal Data from you through various interactions with the Platform. The categories of data we collect and the primary circumstances in which they arise are as follows:

3.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, username, and password upon Account creation;
• Contact details: Mobile number and residential address, required for account verification and communication;
• Identity documents: Copy of Malaysian MyKad, passport, or other government-issued identification submitted during KYC verification;
• Financial data: Bank account details, e-wallet account numbers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), and transaction history associated with deposits and withdrawals;
• Correspondence: Records of communications you initiate with our support team via live chat or email.

3.2 Data Collected Automatically

• Device information: IP address, browser type and version, operating system, device model, and unique device identifiers;
• Usage data: Pages visited, features used, time spent on the Platform, search queries, and navigation paths;
• Transaction logs: Bet history, game activity, deposit and withdrawal records, and bonus claim data;
• Session data: Login timestamps, session duration, and logout events;
• Geolocation data: Approximate location derived from your IP address, used for fraud prevention and geographic access controls.

3.3 Data from Third Parties

We may receive limited Personal Data about you from third-party service providers in the following contexts: payment processors confirming transaction status; identity verification service providers completing KYC checks; and fraud detection partners flagging suspicious activity patterns.

4. How We Use Your Data

kor18plus processes your Personal Data for the following specific purposes. We collect only what is necessary and proportionate for each stated purpose.

4.1 Account Management and Service Delivery

We use your registration data, contact details, and financial data to create and maintain your Account, process deposits and withdrawals via Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank), authenticate your identity at login, and deliver the full range of betting and casino Services offered on the Platform.

4.2 Regulatory Compliance and AML

We are legally required to conduct KYC verification, monitor transactions for suspicious activity, maintain records of financial transactions in accordance with anti-money laundering obligations, and report certain transactions or activities to regulatory authorities where required by law. This processing is mandatory and cannot be opted out of by Users.

4.3 Fraud Prevention and Platform Security

Technical data, usage data, and identity data are used to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and other conduct prohibited under our Terms & Conditions. This includes monitoring for multiple account creation, VPN usage in breach of geographic restrictions, and patterns indicative of coordinated betting fraud.

4.4 Responsible Gambling Monitoring

We use your usage data and transaction history to monitor for behavioural indicators of problem gambling — such as escalating deposit frequency, extended session duration, or repeated attempts to reverse self-exclusion requests. This monitoring supports our responsible gambling obligations and protects the welfare of our users.

4.5 Customer Support

Communications data, including live chat transcripts and email correspondence, is retained to assist in resolving support requests, investigating complaints, and maintaining quality standards in our customer service operations.

4.6 Service Improvement and Analytics

Aggregated and anonymised usage data is analysed to improve Platform performance, identify technical issues, refine the user experience, and make informed product development decisions. Where analytics involve non-anonymised data, this is limited to the minimum necessary for the operational purpose.

5. Legal Basis for Processing

kor18plus processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including Account management, payment processing, and delivery of Services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, AML requirements, and mandatory record-keeping duties.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and analytics — provided such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent as the legal basis for processing (for example, for certain marketing communications), you retain the right to withdraw that consent at any time by contacting our support team.

6. Data Sharing and Disclosure

kor18plus shares your Personal Data only in the following defined circumstances, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Service Providers

Transaction data is shared with the relevant payment processors to facilitate deposits and withdrawals. This includes e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), and DuitNow / FPX network operators. These providers act as Data Processors and are contractually bound to use your data solely for payment processing purposes.

6.2 Identity Verification Providers

Where KYC verification is conducted through a third-party identity verification service provider, your identity documents and related data will be transmitted to that provider under a data processing agreement. Such providers are not permitted to retain or use your data beyond what is necessary to complete the verification.

6.3 Regulatory and Law Enforcement Authorities

We may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or other governmental bodies where we are required to do so by applicable law, court order, or regulatory directive. We will, where permitted, notify you of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving kor18plus, your Personal Data may be transferred to the acquiring or successor entity, subject to the same protections as those described in this Privacy Policy. We will notify you of any such transfer that materially affects your data rights.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. kor18plus uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform effectively and deliver a consistent user experience.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impairing basic Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred payment method, or display options, to enhance your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including which pages are visited most frequently and where users exit. This data helps us improve the Platform experience.
• Security Cookies: Used to detect and mitigate fraudulent logins, unusual account activity, and other security threats, including device fingerprinting for multi-account detection.

7.3 Managing Cookies

You may configure your browser to reject or delete cookies. However, disabling certain cookies may prevent you from accessing core Platform features, including login and payment processing. Most modern browsers provide cookie management tools within their settings menus.

8. Data Retention

kor18plus retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active Account Data: Retained for the full duration of your Account's active status, plus an additional retention period following Account closure as required by AML and regulatory obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure, or longer where required by applicable law, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction logs, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Chat transcripts and email records are retained for up to three (3) years from the date of the final communication in a given thread.
• Technical and Usage Data: Aggregated analytics data is retained indefinitely in anonymised form. Non-anonymised usage logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be attributed to an identifiable individual.

9. Data Security

kor18plus implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and our servers is encrypted using 256-bit TLS encryption;
• Access Controls: Personal Data is accessible only to authorised personnel who require it for their specific operational functions. Access is governed by role-based permissions and audit logging;
• Password Security: Account passwords are stored using industry-standard cryptographic hashing algorithms. Plaintext passwords are never stored or transmitted;
• Fraud Monitoring: Automated systems monitor Account activity in real time for indicators of unauthorised access or unusual transaction patterns;
• Data Minimisation: We collect only the Personal Data necessary for each processing purpose and avoid retaining surplus data beyond the applicable retention period.

While kor18plus takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own Account credentials and for notifying us promptly of any suspected breach of Account security.

10. Your Rights

Subject to applicable data protection legislation, you have the following rights with respect to your Personal Data held by kor18plus:

10.1 Right of Access

You may request a copy of the Personal Data that kor18plus holds about you. We will respond to verified access requests within a reasonable timeframe, typically within thirty (30) days.

10.2 Right to Rectification

If you believe that any Personal Data we hold about you is inaccurate or incomplete, you have the right to request its correction. Certain data corrections (such as changes to name or date of birth) may require supporting documentation.

10.3 Right to Erasure

You may request the deletion of your Personal Data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that erasure requests may be limited where we are legally required to retain data (e.g., for AML compliance).

10.4 Right to Restriction of Processing

You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.

10.5 Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.

10.6 Right to Object

You have the right to object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Minors and Age Restrictions

The kor18plus Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from minors. If you are under the age of 21, you are not permitted to register an Account or use our Services.

If kor18plus becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated Account and securely delete the data in question, subject to any mandatory retention obligations under applicable law.

Parents and guardians who believe a minor has registered on the Platform or has access to an Account are urged to contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

12. Third-Party Services and Links

The kor18plus Platform may integrate third-party services, including game providers, live streaming providers, and payment processors. Where third-party services are embedded within the Platform, those providers may collect certain technical data (such as device identifiers or usage metrics) independently, subject to their own privacy policies.

kor18plus is not responsible for the privacy practices of third-party service providers operating independently of our data processing instructions. We encourage you to review the privacy policies of any third-party services you interact with. We select our third-party partners carefully and require contractual commitments to data protection standards equivalent to our own where applicable.

13. International Data Transfers

kor18plus operates infrastructure that may be located in jurisdictions outside Malaysia. Where your Personal Data is transferred to, processed in, or stored in a jurisdiction outside Malaysia, we take appropriate steps to ensure that such transfers are subject to adequate levels of data protection.

These steps may include the use of standard contractual clauses, binding corporate rules, or reliance on the adequacy decisions of relevant regulatory authorities. In all cases, kor18plus will not transfer your Personal Data to a jurisdiction that does not provide a level of protection comparable to that which applies in your home jurisdiction, without your explicit consent or unless otherwise required by law.

14. Policy Updates

kor18plus reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered Users via a notice displayed prominently on the Platform or by email to the address associated with your Account. The effective date at the top of this page will be updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed of how we handle your Personal Data. Continued use of the Platform after notification of changes constitutes your acceptance of the revised Privacy Policy.

Where required by applicable law, material changes that affect your rights or our obligations will be communicated to you before they take effect, and where consent is the legal basis for processing, we will request fresh consent where necessary.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which kor18plus handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. Our live chat facility is the fastest way to reach our support team and is the recommended channel for data rights requests.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to respond within 3 business days.

All data rights requests will be handled in accordance with applicable data protection law. Where we need to verify your identity before processing a request, we will contact you to request appropriate documentation. We will not charge a fee for handling routine data requests.