Online138 is fully committed to protecting every member's privacy. This document clearly explains how we collect, use, store and safeguard your personal information — as well as the rights you hold over that data. Reading it will help you make more informed decisions about your use of our platform.
Here is how Online138 ensures the privacy and security of every Malaysian member's personal data is fully protected.
All data transmitted between your device and Online138's servers is encrypted using TLS 1.3 with 256-bit SSL encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB. No third party can intercept or read your data in transit.
Online138 member data is stored on servers protected by multiple layers of physical and digital security, including biometric access controls, intrusion detection systems, and regular backups. Only authorised personnel may access member data for legitimate operational purposes.
Online138 gives you full control over your personal data. You may request to view, correct, or delete your data at any time through your account settings or by contacting our support team — subject to applicable legal compliance requirements.
Online138 has never and will never sell, rent, or disclose member personal information to third parties for marketing or commercial purposes without your explicit consent. Your data is used solely for account management, transaction processing, and service improvement.
The Online138 Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations collect, process, and store individuals' personal data. We conduct regular internal compliance reviews to ensure our practices remain current and relevant.
In the event of any security incident involving member data, Online138 is committed to notifying affected members within a reasonable timeframe via email or in-platform notification. We will also take appropriate remedial action to protect members from any potential consequences.
Important Notice: This Privacy Policy describes how Online138 collects, uses, discloses, and protects your personal information when you use our platform at https://online138.biz. By registering an account or continuing to use the platform, you agree to the terms of this Privacy Policy. Please read it carefully and contact us if you have any questions.
Online138 ("we", "the platform") takes the responsibility of protecting personal data very seriously. We understand that our members' trust is our most valuable asset, and that trust can only be maintained when we handle your personal data with full integrity and transparency.
This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It applies to all individuals who use the Online138 platform — whether as a visitor, registered member, or VIP member.
Each time you register an account, make a deposit via Touch 'n Go, DuitNow or GrabPay, play at a live casino table, claim a bonus, or contact our support team, your personal data may be collected and processed in accordance with the terms set out in this document.
Data Controller: The data controller for personal information collected through the Online138 platform is the company that operates the Online138 platform. For any privacy-related enquiries, please contact our Privacy Officer at support@online138.biz with the subject line "Privacy Enquiry".
Online138 collects various types of personal information depending on how you interact with our platform. The following are the main categories of data we may collect:
| Data Category | Specific Information Examples | Obligations |
|---|---|---|
| Identification Data | Full name, MyKad number, date of birth, nationality | Mandatory |
| Contact Data | Malaysian phone number, email address, residential address | Mandatory |
| Account Data | Username, password (stored in hashed format), security questions | Mandatory |
| Financial Data | Payment methods (TNG, DuitNow, GrabPay, FPX), deposit and withdrawal transaction history | Mandatory |
| Activity Data | Game history, betting records, wins and losses, platform usage patterns | Automatic |
| Technical Data | IP address, device type, operating system, web browser, cookie information | Automatic |
| Communication Data | LiveChat records, support emails, WhatsApp messages, feedback and complaints | Where applicable |
Online138 does not collect sensitive personal data such as health information, religious beliefs, or criminal records unless specifically required for a defined legal compliance purpose.
Your personal data is collected by Online138 through the following channels:
Online138 uses the personal data collected for the following legitimate and reasonable purposes:
Direct Marketing: Online138 may use your email address or phone number to send you promotional offers and relevant bonus information. You may opt out of these marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.
Online138 does not sell or rent member personal data to any third party for commercial purposes. However, there are limited circumstances in which we may need to share your information with certain parties:
Contractual Safeguards: All third parties that receive Online138 member data are bound by strict data processing agreements, ensuring they use that data only for authorised purposes and protect it to a standard equivalent to Online138's own security requirements.
The security of members' personal data is the highest technical and operational priority at Online138. We implement multiple layers of protection to safeguard your data:
Shared Responsibility: While Online138 takes every possible measure to protect your data, account security also depends on your own actions. Make sure you use a strong, unique password, never share your login credentials, and contact us immediately if you suspect any unauthorised access to your account.
Online138 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:
You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality and user experience of the Online138 platform.
Online138 retains members' personal data for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations:
Once the specified retention period has lapsed, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data held by Online138:
You have the right to request a copy of the personal data we hold about you. Requests may be submitted via email to our support team and will be processed within 14 business days.
If your personal data is inaccurate or incomplete, you have the right to request a correction. Simple updates can be made directly in your account settings or through customer support.
You may request the deletion of your personal data in certain circumstances, such as when the data is no longer required for its original purpose, subject to applicable legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes. Once your objection is received, we will immediately stop using your data for that purpose.
You may request to receive your personal data in a machine-readable format (such as JSON or CSV) for transfer to another service provider where applicable.
In certain circumstances, you may request that we restrict how we process your personal data — for example, while a dispute regarding data accuracy is being resolved.
The Online138 platform is strictly restricted to individuals aged 18 and above. We do not knowingly collect or process personal data from minors.
Should we discover that personal data belonging to an individual under the age of 18 has been collected through our platform, we will take the following steps immediately:
Parents or guardians who suspect that their minor child has registered for or used the Online138 platform are urged to contact us immediately via email at support@online138.biz for immediate action.
Online138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any amendments take effect upon publication of the latest version on this website.
For material amendments — that is, changes that significantly affect how we use your personal data — Online138 is committed to:
Periodic Review: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after any amendment takes effect will be considered your acceptance of the changes.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:
We are committed to responding to all privacy-related enquiries within three (3) business days. For more complex complaints requiring internal investigation, a full response will be provided within 21 business days.
If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications Malaysia — the authority responsible for overseeing PDPA compliance in Malaysia.
Closing Note: This Online138 Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. For optimal security and privacy while using our platform, we recommend using a strong password, enabling two-factor authentication, and reviewing your account activity regularly. Never share your login credentials with anyone — including Online138 staff, who will never ask for your password through any channel.
Online138 operates on the principle that your privacy is a fundamental right to be protected, not merely a legal obligation. We continually strive to be more transparent about how we handle your data. For more information about your rights and how we manage the platform, please read Terms & Conditions and Responsible Gaming us.
Play with peace of mind — your personal data is protected by 256-bit SSL encryption, a transparent Privacy Policy and full Malaysia PDPA compliance. Register for free, deposit a minimum of RM 20 and claim your Welcome Bonus of up to RM 500.