Your privacy is our priority. This document transparently explains how online138 collects, uses, stores, and protects your personal data — in line with global data protection best practices.
Quick Summary: online138 only collects data necessary to operate the platform securely. We do not sell your personal data to third parties. All data is protected with 256-bit SSL encryption and stored on secure servers. You have the right to access, correct, or request deletion of your data at any time.
Online138 ("we", "our platform") respects the privacy of every individual who uses our services. This Privacy Policy clearly explains how we handle the personal information you provide to us or that is collected automatically when you use the platform.
We operate under strict data protection principles and are committed to ensuring that data collection and processing is carried out only for legitimate, necessary, and transparent purposes. Whenever you register, login, make a deposit, or use any feature of the online138 platform, this Privacy Policy applies in full.
By continuing to use this platform after reading this policy, you agree to the way we process your personal data as described below. If you have any concerns, you may contact our data protection team at any time.
The data we collect falls into two main categories — data you provide voluntarily while using the platform, and data collected automatically through platform technology.
| Data Category | Specific Details | How Collected |
|---|---|---|
| Personal Identity | Full name, date of birth, identification card or passport number | Registration & KYC |
| Contact Information | Email address, phone number, residential address | Registration & Profile Updates |
| Financial Data | Bank name, account number (partially encrypted), transaction records | Deposits & Withdrawals |
| Technical Data | IP address, device type, web browser, operating system | Automatic (server logs) |
| Activity Data | Game records, betting history, session duration, game preferences | Automatic (during gameplay) |
| Communication Data | Live chat records, support emails, feedback | Support Interactions |
We do not collect more data than is necessary for the stated purposes. Sensitive data such as credit card numbers is processed directly by licensed integrated payment gateways and is not stored on online138 servers.
Every piece of data we collect has a clear and legitimate purpose. We do not process your data for any purpose other than those stated below without notifying you in advance.
Online138 does not sell, does not rent, and does not trade members' personal data to any third party for their own commercial purposes. However, there are limited situations where sharing data with certain parties is necessary to operate the platform.
All third parties that receive your data from online138 are required to comply with data protection standards equal to or higher than our own. Service agreements with every third party include legally binding data protection clauses.
Your data security is our highest technical priority. online138 servers employ multiple layers of protection designed to prevent unauthorized access, data breaches, and cyberattacks.
The online138 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and understand platform usage patterns in aggregate.
| Cookie Types | Purpose | Status |
|---|---|---|
| Session Cookies | Maintaining your login status and active session while browsing the platform | |
| Preference Cookies | Remembering your language settings, display theme, and platform preferences | |
| Analytics Cookies | Understanding how users interact with the platform to drive improvements | |
| Security Cookies | Detecting unauthorized access attempts and protecting your account | |
| Marketing Cookies | Delivering relevant promotions based on your platform activity |
You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain platform functions, such as the ability to stay logged in.
As an online138 member, you have certain rights regarding your personal data that we hold. We are committed to making it easy to exercise these rights quickly and conveniently.
To ensure the platform operates smoothly and securely, some data may be processed outside Malaysia by our service providers. All international data transfers are carried out with adequate safeguards in place.
Although data may be processed by servers in different locations, the protection you receive under this Privacy Policy remains unchanged regardless of where processing takes place. Your rights stay the same no matter where your data is processed.
The online138 platform may contain links to or be integrated with third-party services such as game providers and payment gateways. This Privacy Policy applies solely to your use of the online138 platform.
Online138 is an exclusive platform for individuals aged 18 and above. We do not knowingly collect or process any personal data of individuals under the age of 18.
Online138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements.
If you have any questions, concerns, or wish to exercise any of your rights regarding your personal data, you can reach us through the following channels.
We take every privacy-related inquiry seriously. If you are not satisfied with our response, you have the right to file a complaint with the data protection regulatory authority relevant to your region.
Under our privacy policy, every member's personal data rights are fully protected.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 30 days.
If the data we hold is inaccurate or outdated, you have the right to request an immediate correction through your profile settings or customer support.
Under certain circumstances, you have the right to request deletion of your personal data — subject to any applicable legal record-keeping obligations.
You may request that we restrict the processing of your data in certain circumstances, such as when the accuracy of the data is in dispute.
You have the right to receive your data in a structured, machine-readable format for transfer to another service provider if you choose.
For processing that relies on your consent (such as marketing emails), you may withdraw that consent at any time without affecting any prior processing.
Data protection is not just a policy document — it is a daily practice we implement at every layer of the platform.
All communications between your device and online138 servers are encrypted using the latest TLS 1.3 standard. No third party can intercept or read your data in transit.
Your data is stored in data centres that meet the highest physical and digital security standards, with layered access controls and continuous round-the-clock monitoring.
Only staff who need access to perform their duties are permitted to view member data. Every access is recorded in an audit log that can be reviewed for full accountability.
Our automated threat detection system runs 24/7 to identify and block any unauthorized access attempts, cyberattacks, or suspicious activity before it can affect your data.
Our platform undergoes periodic independent security audits by third-party experts who assess vulnerabilities and recommend improvements to ensure our protections remain up to date.
When data is no longer required upon reaching its retention period, it is deleted using secure erasure methods that ensure the data cannot be recovered by any party.