Last updated: 1 June 2026. This Privacy Policy explains how rally918 collects, uses, stores, and protects the personal data of its members and website visitors. Please read this document carefully.
Summary: rally918 collects only the personal data necessary to operate a licensed online gaming platform, process MYR payments, and fulfil regulatory compliance obligations. We do not sell your data. We do not share it with advertisers. You have meaningful rights over your data and can exercise them by contacting us at any time.
rally918 operates the online casino and sportsbook platform accessible at rally918.org (the "Platform"). For the purposes of data protection law, rally918 is the data controller — meaning we determine the purposes and means by which your personal data is processed. References to "rally918," "we," "us," or "our" in this Privacy Policy refer to the Platform operator.
This Privacy Policy applies to all current and former Members of the rally918 platform, as well as to visitors who browse the Platform without registering an account. It covers personal data processed in connection with the provision of our gaming, sportsbook, and payment services to Malaysian players and other eligible users.
rally918 collects personal data in the categories described below. We collect only what is necessary for the specific purpose stated — we do not collect personal data speculatively or in excess of operational need.
rally918 collects personal data through the following channels:
rally918 processes personal data only where a lawful basis exists under applicable data protection law. The lawful bases we rely upon are:
rally918 uses collected personal data for the following purposes:
rally918 does not use Member personal data for automated decision-making that produces significant legal effects on Members, except where required for AML or fraud prevention purposes, in which case Members have the right to request human review of the relevant decision.
6.1 rally918 does not sell Member personal data to any third party, including data brokers, advertisers, or marketing agencies.
6.2 rally918 shares personal data with third parties only in the following circumstances:
6.3 All third parties with whom rally918 shares personal data are required to process that data in accordance with applicable data protection law and rally918's data processing requirements.
7.1 The operation of rally918 may involve the transfer of personal data to processors located outside Malaysia, including in jurisdictions where the data protection laws differ from those applicable in Malaysia.
7.2 Where such transfers occur, rally918 ensures that adequate safeguards are in place, including contractual data processing agreements that incorporate standard data protection clauses, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
7.3 Specifically, KYC verification providers and certain payment infrastructure components may process data in locations outside Peninsular Malaysia. rally918 maintains written agreements with all such processors governing the terms of data transfer and processing.
8.1 rally918 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, plus any additional period required by Applicable Law or licensing obligations.
8.2 As a general guide:
8.3 Data retained beyond the minimum required periods is stored in a secure archived state with access restricted to compliance personnel only.
9.1 rally918 uses first-party session cookies to maintain your authenticated session while you are logged in to the Platform. These cookies are strictly necessary for the Platform to function and cannot be declined without impairing core functionality.
9.2 rally918 also uses functional cookies to remember your language preferences, game lobby filter settings, and display preferences across sessions.
9.3 rally918 does not use third-party advertising cookies or cross-site tracking pixels. No Member browsing data is shared with advertising networks for the purpose of serving targeted advertisements on external websites.
9.4 You may control cookie preferences through your browser settings. Note that disabling session cookies will prevent you from maintaining an authenticated login session on rally918.
Subject to applicable data protection law, rally918 Members have the following rights in respect of their personal data:
To exercise any of these rights, contact rally918 at support@rally918.org. rally918 will respond within thirty (30) days of receiving a verifiable data request. Identity verification will be required before personal data is disclosed or modified in response to a data request.
rally918 strictly prohibits use of the Platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If rally918 discovers that personal data from an underage individual has been collected, that data will be deleted immediately and the associated account closed.
If you believe a person under 21 has registered on the rally918 platform, please contact us immediately at support@rally918.org with the relevant details so that we may take prompt action.
12.1 rally918 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These measures include:
12.2 In the event of a personal data breach that is likely to result in a risk to Member rights, rally918 will notify affected Members within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable data breach notification requirements.
12.3 While rally918 takes reasonable precautions, no internet-based platform can guarantee absolute data security. Members are encouraged to use strong, unique passwords for their rally918 account and to enable 2FA.
The rally918 platform does not include links to third-party websites for advertising or affiliate purposes. Any links that appear on the Platform direct Members only to other sections within rally918.org. rally918 is not responsible for the privacy practices of any external website that a Member may independently navigate to.
14.1 rally918 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or Platform operations. The "last updated" date at the top of this page will be revised with each amendment.
14.2 Where changes are material — meaning they significantly affect Member rights or the ways in which rally918 uses personal data — rally918 will notify active Members by email or in-platform notification prior to the changes taking effect.
14.3 Continued use of the rally918 platform following publication of an updated Privacy Policy constitutes acknowledgement of the updated terms. Members who do not accept an updated Privacy Policy should cease using the Platform and may request voluntary account closure.
For all privacy-related enquiries, data access requests, rectification requests, or erasure requests, please contact rally918's data protection contact as follows:
Email: support@rally918.org | Subject line: "Privacy Request – [your username]". Include a description of your request and, for data access requests, confirmation of your registered email address for identity verification purposes.
rally918 aims to acknowledge all privacy requests within five (5) business days and to resolve them within thirty (30) calendar days. Complex requests may require additional time, in which case rally918 will notify you of the extended timeline and reasons for the delay.
For general account support, transaction queries, or responsible gaming assistance, please also contact support@rally918.org. The rally918 member support team is available around the clock to assist Malaysian players with any account or platform-related matter.
rally918 Data Protection Commitments
Six principles that define how rally918 handles your personal data.
rally918 does not sell Member personal data to any third party — not to data brokers, not to advertisers, not to marketing agencies. Your data is used to run your account, not to monetise your identity.
All personal data — login credentials, payment details, KYC documents — travels between your device and rally918's servers under the same encryption standard used by Malaysian online banking portals.
rally918 collects personal data strictly in proportion to operational and regulatory need. We do not harvest data speculatively. If a piece of information is not required to run your account or meet a legal obligation, we don't ask for it.
Access, rectify, erase, restrict, port, or object — rally918 honours all Member data rights under applicable law. Submit a request by email and receive a response within 30 days. No runaround, no bureaucratic delays.
rally918's data collection practices for identity verification and transaction monitoring are designed to meet international AML and gaming licensing standards. Compliance protects both the platform and its Members from financial crime exposure.
If a data security incident occurs that poses a risk to Member data, rally918 is committed to notifying affected Members within 72 hours of becoming aware — not days later, not buried in a routine update.
A platform that respects your privacy the same way it respects your play. Live casino, slots, sportsbook — all in MYR, all behind a secure rally918 account. Members must be 21+.