Your Personal Data Protection at mr138

This Privacy Policy is published by mr138 ("we", "platform", "company") and applies to all users who register for or use the services provided under the domain mr138.one ("Website"). By registering an account or continuing to use our services, you agree to the terms set out in this Privacy Policy.

We operate under an international licence and comply with the data protection standards set by the relevant licensing authority. This policy also takes into account best practices in the responsible online gambling industry.

1. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Information — any data that can be used to identify you directly or indirectly, including your name, email address, mobile phone number, date of birth, and financial transaction details.
• Processing — any operation carried out on personal information, including collection, storage, use, disclosure, or deletion.
• Data Controller — mr138, which determines the purposes and means of processing your personal information.
• Data Processor — a third party that processes data on behalf of mr138, subject to binding instructions and confidentiality agreements.
• Cookies — small text files stored on your device when you visit our Website.

2. Information Collection

mr138 collects personal information through various lawful and transparent means. The information we collect includes:

Information you provide directly:

• Full name and date of birth at account registration
• Email address and mobile phone number
• A copy of your identity card (MyKad) or other identity document for age verification and anti-fraud purposes
• Payment method details such as e-wallet account numbers (Touch 'n Go eWallet, DuitNow) and transaction details
• Any information you provide when contacting our customer support

Automatically collected information:

• IP address and device information (device type, operating system, web browser)
• Usage log data including pages visited, access times and referring URLs
• Cookie data and related tracking technologies (see Section 6)
• Deposit and withdrawal transaction records
• Game activity history on the mr138 platform

3. How We Use Your Information

The personal information collected is used for the following purposes:

• To verify your identity and age at account registration (this platform is for users aged 21 and above only)
• To process deposits, withdrawals and other financial transactions securely
• To provide 24/7 customer support via live chat and email in Malay and English
• To manage your account and ensure a smooth gaming experience on the mr138 platform
• To send information about bonuses, promotions and service updates (subject to your notification preferences)
• To comply with legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements
• To detect and prevent fraud, unauthorised access and suspicious activity
• To carry out internal statistical analysis to improve the platform and services
• To enforce the Terms and Conditions and other applicable policies

We will not use your personal information for purposes not stated here without notifying you in advance and, where applicable, obtaining your consent.

4. Disclosure to Third Parties

mr138 does not sell your personal information to any party. However, we may share information with certain parties in limited circumstances as follows:

• Payment Service Providers — providers that process your transactions via Touch 'n Go eWallet, DuitNow, FPX and crypto networks. They are bound by confidentiality agreements and only process data necessary for the transaction.
• Game Software Providers — game studios that provide the gaming platform, subject to strict confidentiality agreements and receiving only the technical data required.
• Regulatory and Licensing Bodies — authorities that issue mr138's operating licence may require access to certain records for audit and compliance purposes.
• Law Enforcement Agencies — where we are required by a valid court order or binding legal requirement to disclose certain information.
• Technical Service Providers — including server hosting providers, cybersecurity services and internal analytics, all of which are subject to strict data processing agreements.

5. Data Storage and Security

The security of your personal information is a top priority for mr138. The following technical and organisational measures are in place to protect your data:

• Data encryption in transit using 256-bit TLS/SSL protocols across the website and internal systems
• Data encryption at rest for sensitive information such as passwords and payment details
• Role-based access control (RBAC) ensuring staff can only access data relevant to their duties
• Continuous security system monitoring and regular penetration testing
• Regular data backup procedures and tested disaster recovery processes
• Mandatory cybersecurity training for all staff who handle personal data

Your personal data will be retained for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Financial transaction records are typically retained in accordance with the retention requirements set by our licensing body.

6. Cookies and Tracking Technologies

The mr138 website uses cookies and similar technologies to improve the user experience and collect necessary usage information. The types of cookies we use include:

• Essential Cookies — required for basic website functions such as maintaining your login session and language preferences. These cookies cannot be disabled.
• Performance Cookies — collect aggregated and anonymised data about how users interact with our website to help us improve it.
• Functional Cookies — remember your preferences such as display settings and game preferences to provide a more personalised experience.
• Analytics Cookies — used to understand overall platform traffic and usage patterns for internal improvement purposes.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the mr138 website.

7. Your Rights

As an mr138 member, you have the following rights regarding your personal information:

• Right of Access — you may request a copy of the personal information we hold about you
• Right of Rectification — you may request correction of any information that is inaccurate or incomplete
• Right of Erasure — you may request deletion of your personal information, subject to legal obligations that require retention of certain records
• Right to Restrict Processing — you may request that we restrict the processing of your data under certain circumstances
• Right to Data Portability — you may request your data in a machine-readable format for transfer to another provider
• Right to Object — you may object to the processing of your data for specific purposes such as direct marketing

To exercise any of the above rights, contact our customer support team via live chat or email. We will process your request within a reasonable timeframe, and in certain cases may require identity verification before responding.

8. Cross-Border Data Transfers

As mr138 operates as an international online platform, your personal information may be transferred to and stored on servers located outside Malaysia. In such cases, we ensure that:

• Data transfers are made to jurisdictions with adequate or equivalent data protection standards
• Appropriate data transfer agreements are in place to ensure your data remains consistently protected
• Overseas service providers are subject to security compliance assessments before being selected

By using mr138's services, you consent to such data transfers within the scope set out in this Privacy Policy.

9. Links to Other Websites

The mr138 website may contain links to third-party websites that are operated independently from us. This Privacy Policy does not apply to those websites. mr138 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of each website you visit.

10. Children and Age Restrictions

The mr138 platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal information from individuals below the specified age.

We apply age verification procedures during account registration and reserve the right to request identity verification documents such as MyKad at any time. These measures are part of mr138's commitment to responsible gambling.

11. Privacy Policy Amendments

mr138 reserves the right to modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or services provided. You will be notified of any significant amendments through:

• A notice displayed on the mr138.one homepage
• An email to the address registered to your account
• An in-platform notification when you log in to your account

The "Last updated" date at the top of this policy reflects the date of the most recent amendment. Continued use of mr138's services after any amendment takes effect will be considered your acceptance of the revised terms.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact the mr138 Data Protection team through the following channels:

• Live Chat — 24/7 support directly on the mr138.one website in Malay and English
• Email — [email protected]

We are committed to responding to every privacy-related inquiry thoroughly and within a reasonable timeframe. More information about our support services is available on the FAQ page.