Reference

How 918kidd Handles Your Personal Information

This Privacy Policy sets out exactly what data 918kidd collects when you open an account, make a deposit via Touch 'n Go eWallet, Boost or GrabPay, and use the platform — and how we keep that data safe.

Account data protectione-Wallet transaction privacyCookie and device controlsYour right to request dataClear retention periods
918kidd How 918kidd Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct or delete the personal data we hold for your account, reach out through any of the channels below. We aim to respond to data-related requests within a reasonable timeframe. Have your registered account details ready so we can verify your identity before actioning any change.

Live Chat Start a live chat session from the account page. Quickest path for account-specific data queries — have your registered mobile number ready.
Email Support Send a written data request to our support address listed on the contact page. Include your account username and the specific data action you need.
In-App Help Open the Help section inside your 918kidd account on mobile or browser. Tap 'Account & Privacy' to submit a data query directly from your session.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We apply SSL encryption across all account pages and payment screens, so data travelling between your device and our servers is protected in transit. Your payment credentials — whether that is a Touch 'n Go eWallet reference or a GrabPay transaction ID — are never stored in plain text on our side. Account access requires a one-time password sent to your registered mobile number each time you log in from an unrecognised device, adding a second layer of verification beyond your password.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to see which pages load slowly. You can decline non-essential cookies via the cookie banner on first visit.

Data Retention

Account records are kept for as long as your account is active and for a defined period after closure, in line with our internal audit policy. You may request deletion once that period passes.

Account Security

Device session tokens expire automatically after a period of inactivity. To log out all active sessions at once, use the 'Sign Out All Devices' option in your account security settings.

Third-Party Processors

Payment processors handling Boost, GrabPay or FPX transactions receive only the data needed to complete the transfer. They operate under their own data agreements and our instructions.

Common Questions About Your Privacy at 918kidd

These are the data and privacy questions we hear most from account holders in Malaysia. If your question is not here, reach out via live chat or email and we will walk you through it.

We collect your name, email address, mobile number and a verified payment method such as Touch 'n Go eWallet or Boost. This is the minimum needed to run your account and process transactions.

We do not sell your data. We share it only with payment processors like GrabPay or FPX to complete your transactions, and only the fields those processors need to do their job.

Send a written request via email or live chat with your account username. We will verify your identity first, then provide a summary of the personal data linked to your account.

Yes. Once your account is closed and our retention period has passed, you may request deletion. Submit the request through the in-app Help section under 'Account & Privacy' or via email support.

Device identifiers help us detect logins from unrecognised devices and trigger an OTP verification to your registered number. This protects your account if your password is ever compromised.

Session cookies keep you logged in during your visit. Analytics cookies help us fix slow-loading pages. You can decline non-essential cookies on the banner that appears during your first visit.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.