138 Platform Privacy Policy – Malaysia User Data Protection

Introduction

Platform 138 ("we", "Platform", or "138") are committed to protecting the privacy and personal data of all our users. As an online wagering and gaming platform operating in Malaysia, we understand that your trust is our most valuable asset.

This Privacy Policy is designed to give you a clear and comprehensive understanding of:

• Types of personal data we collect from you
• Why and how we use your data
• Which parties may receive your data and under what circumstances
• Data retention periods and the security measures we apply
• Your rights regarding your personal data

This policy applies to all information collected through the website 138, mobile app, customer support, and all other interactions with our platform. By using the platform 138, you agree to the practices described in this policy.

Information We Collect

We collect various types of information depending on how you interact with the platform 138. Below is a detailed explanation of the categories of data we collect:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use the platform 138, we automatically collect certain technical information required for the smooth and secure operation of the platform:

• IP address and general location data based on IP
• Device type, operating system, and web browser version used
• Pages visited, visit duration, and navigation patterns within the platform
• Gaming session and wagering logs including time, game type, and bet amount
• Platform performance technical data from your device

2.3 Information from Third-Party Sources

In certain situations, we may receive information about you from trusted third-party sources, including identity verification service providers, financial institutions for payment verification, and licensed fraud prevention agencies. All such information is used solely for security and legal compliance purposes.

How We Use Your Data

Platform 138 uses your personal data only for lawful and defined purposes. Every use of data is grounded in a sound legal basis, whether that is your consent, contractual necessity, a legal obligation, or the platform's legitimate interests.

• Account Management: Creating, verifying, and managing your user account including the KYC process required by law
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions accurately and securely
• Service Delivery: Providing access to all products and games available on the platform including sports, bingo, live betting, and slots
• Platform Security: Detecting, investigating, and preventing fraud, money laundering, and any suspicious activity
• Legal Compliance: Fulfilling reporting and compliance obligations to relevant regulatory bodies
• Service Improvement: Analysing usage patterns to improve user experience, platform performance, and product offerings
• Communications: Sending transaction notifications, account updates, and relevant promotional information (subject to your marketing preferences)
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support

Information Sharing

Your privacy is our priority. 138 does not sell your personal data to any party. However, there are limited situations where we need to share certain information with the following parties:

4.1 Third-Party Service Providers

We work with trusted service providers to operate the platform, including licensed payment processors, certified gaming software providers, security-certified cloud service providers, and data analytics companies. All third parties are required to comply with strict data confidentiality agreements and may only use your data for purposes we have specified.

4.2 Authorities and Regulatory Bodies

We may be required to disclose certain information to government authorities, regulatory bodies, or law enforcement agencies when mandated by applicable law, court order, or official investigation. In such circumstances, we will disclose only the minimum information necessary and will notify you if permitted to do so by law.

4.3 Business Transfers

In the event of a platform merger, acquisition, or asset sale 138, user data may be transferred as part of that transaction. You will be notified in advance and given the option to withdraw your consent where applicable.

Data Storage & Security

5.1 Retention Period

We retain your personal data only for as long as necessary for the purposes stated in this policy or as required by law. Generally:

• Active account data: Retained for the duration your account remains active
• Financial transaction data: Retained for a minimum of 7 years for legal compliance and audit purposes
• Game activity logs: Retained for 5 years
• KYC Records: Retained for 7 years after account closure
• Customer support communication data: Retained for 3 years

5.2 Security Measures

Platform 138 implements multiple layers of technical and organizational security measures to protect your data:

• 256-bit SSL/TLS encryption for all data transmissions
• Two-factor authentication (2FA) for account access
• 24/7 real-time security monitoring and threat detection
• Strict role-based access controls for internal staff
• Regular security audits by independent third parties
• A comprehensive data security incident response plan

Cookies and Tracking Technologies

Platform 138 uses cookies and similar tracking technologies to enhance your experience, analyze platform traffic, and ensure certain features function correctly.

6.1 Types of Cookies We Use

6.2 Cookie Management

You may manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the platform 138. For more information on managing cookies, please refer to the help documentation of your web browser.

Your Rights

As a platform user 138, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations.

To exercise any of the above rights, please contact our customer support team 138 via live chat available 24/7. We will process your request within 30 business days.

International Data Transfers

In the course of its operations, the platform 138 may process or store your personal data on servers located outside Malaysia. This occurs when we engage cloud service providers or internationally certified technology partners.

In all cases of international data transfers, we ensure that:

• The recipient country or organisation has an adequate level of data protection
• Legally binding and appropriate data transfer agreements have been established
• Security standards equal to or higher than those applied in Malaysia are maintained
• Data transfers are made only for legitimate and limited operational purposes

Children's Privacy

Platform 138 is an exclusive service for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

All account applicants are required to verify their age through a strict KYC process before being permitted to use the platform. If we discover that we have collected information from an individual under the age of 18, we will immediately delete that data and close the account in question.

Third-Party Links

Platform 138 may contain links to third-party websites or services, particularly integrated game providers or payment processors. Our Privacy Policy does not apply to those external websites or services.

We encourage you to read the privacy policy of every third-party website or service you access through our platform. 138 is not responsible for the privacy practices or content of third-party websites and makes no guarantees regarding data security on those sites.

Privacy Policy Updates

138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. The "Updated" date at the top of this page will always indicate when the last change was made.

For material and significant amendments, we will endeavour to provide reasonable notice via your registered email or in-platform notifications before the changes take effect. However, it remains your responsibility to review this policy periodically.

Continued use of the platform 138 after any amendment is published constitutes your acceptance of the updated Privacy Policy terms. If you disagree with the changes, please discontinue use of the platform and contact us to close your account.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

We are committed to responding to all privacy-related inquiries within 5 business days. For complaints requiring in-depth investigation, we will notify you within 30 business days.