C418 Privacy Policy — Data Protection Malaysian Platform Users

This Privacy Policy is published by c418, an online betting and casino platform operating under the domain name c418.best and intended specifically for users in Malaysia. This document outlines our privacy practices and serves as a guide on how we handle personal information collected from you when you visit, register, or use any part of the c418 platform — whether through a web browser on your computer, tablet, or mobile phone.

This policy applies to all c418 platform users, including visitors who browse the website without an account, registered members with an active account, and anyone who contacts our customer support team. Each time you use the c418 platform, you may provide us with a certain amount of personal information — whether knowingly during registration, or automatically through technologies such as cookies and server logs.

C418 collects only the data necessary to deliver its platform services effectively, securely, and in compliance with legal requirements. Below is a summary of the types of data we collect:

C418 does not collect any sensitive data such as medical information, religious beliefs, or biometric information unless required for the identity verification (KYC) process that you have consented to. We also do not store full credit or debit card numbers — all payment data is processed securely through recognised payment providers in Malaysia such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX.

C418 uses collected personal data solely for legitimate and relevant purposes. The following are the primary purposes for which c418 uses your personal data:

• Account Management: Create and maintain your c418 account, verify your identity at login, and process account-related requests
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, and processing winning withdrawals to your Malaysian bank account or eWallet
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support in Bahasa Melayu to Malaysian users
• Security & Fraud Prevention: Detect and investigate any suspicious activity, prevent money laundering, and protect the integrity of the c418 platform
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and customer identity verification (KYC)
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the performance, usability, and content of the c418 platform
• Service Communications: Send important notices relating to your account, policy updates, or security information that requires your attention

C418 does not sell, rent, or share users' personal data with third parties for their own marketing or commercial purposes. However, there are specific situations where c418 may need to share your personal data with certain parties in order to provide our services to you:

• Payment Providers: c418 shares necessary transaction information with approved Malaysian payment providers — including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX operators — solely for the purpose of processing your deposits and withdrawals
• Platform Service Providers: c418 engages trusted third-party technology service providers for server hosting, platform analytics, and fraud detection purposes. All such providers are bound by strict confidentiality agreements and may only use shared data for purposes designated by c418
• Legal Authorities: c418 may be required to disclose personal information to Malaysian government authorities or law enforcement when mandated by law, court order, or to comply with valid legal processes
• Fraud Prevention: In certain cases involving serious suspicion of fraud or money laundering, c418 may share relevant information with regulatory bodies or industry partner platforms as part of a collective industry-wide fraud prevention effort

In all of the above situations, data sharing is limited to only the information strictly necessary for the relevant purpose, and c418 ensures that all parties receiving users' personal data have adequate data protection mechanisms in place.

C418 takes the security of users' personal data seriously and has implemented a range of technical and organisational measures to protect data against unauthorised access, disclosure, alteration, or destruction:

• Data in Transit Encryption: All communications between your device and c418 servers are protected with TLS/SSL 256-bit protocols, ensuring that data in transit cannot be intercepted by unauthorised parties
• Stored Data Encryption: Sensitive data stored in c418's databases — including passwords and financial information — is encrypted using robust encryption algorithms
• Internal Access Controls: Access to users' personal data within c418's systems is restricted to staff who require it to perform their duties, and all access is logged and monitored
• Continuous Security Monitoring: The c418 platform is continuously monitored for suspicious activity and unauthorised access attempts, with automated alert systems in place for an immediate response
• Two-Factor Authentication: c418 encourages users to enable two-factor authentication (2FA) on their accounts for an additional layer of protection

Cookies are small text files stored on your device by your web browser when you visit a website. c418 uses cookies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies used by c418:

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect certain functions of the c418 platform, including the ability to stay logged in or save your preferences.

As a c418 platform user based in Malaysia, you have several rights regarding your personal data, and c418 is committed to upholding them. Your key rights are as follows:

To exercise any of the rights above, please contact the c418 support team via live chat on the platform or by email at support@c418.best. We will respond to your request within 14 business days. For complex cases, this period may be extended to up to 30 days, and we will notify you if that is the case.

C418 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. The following is a general guide to our data retention periods:

• Active Account Data: For as long as your account remains active on the c418 platform, plus any required holding period following account closure
• Financial Transaction Records: A minimum of seven years from the transaction date, in line with Malaysian financial and tax regulatory requirements
• Security Logs: Between 90 days and two years, depending on the type of log and security investigation requirements
• Customer Support Correspondence: Three years after the last interaction, to allow historical reference for resolving any future disputes
• Marketing Data: Until you withdraw your consent, or three years after your last interaction with c418 marketing communications
• KYC (Identity Verification) Data: Five years after the business relationship ends, in line with Malaysia's AML requirements

Upon expiry of the applicable retention period, c418 will securely delete or anonymise your personal data, unless a legal requirement mandates longer retention. The data deletion process uses methods that ensure the data cannot be recovered.

The c418 platform may contain links to or integrations with third-party services required for platform functionality — such as Malaysian payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX) and third-party casino game providers. When you interact with these third-party services, their own privacy practices apply — not the c418 Privacy Policy.

C418 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the Privacy Policy of any third-party service provider before using their services.

C418 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or user feedback. When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Displaying prominent notices within the c418 platform for an appropriate period following any changes
• Sending notifications to your registered email address for highly material changes, where it is practicable to do so

It is your responsibility to review this Privacy Policy periodically. Your continued use of the c418 platform after any amendments are published will be considered your acceptance of those changes.

If you have any questions, concerns, or complaints regarding how c418 handles your personal data, or if you wish to exercise any of your privacy rights as outlined in Section 7, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the c418 platform — the fastest way to get an immediate response
• Email: support@c418.best — we will respond within 2 to 4 hours during normal operating hours
• Frequently Asked Questions: Check page FAQ us for quick answers to the most frequently asked privacy questions