Official Privacy Document

Privacy Policy bonus138 – Our Commitment to Protecting Malaysia Players' Data

Your privacy is a priority at bonus138. This document transparently explains how we collect, use, store, and protect your personal data at all times.

Last Updated: 1 January 2026 256-bit SSL Protected Effective jurisdiction: Malaysia

Commitment Privacy bonus138

Six core principles that shape how bonus138 handles your personal data.

High-Level Data Encryption

All your personal and financial data is protected with 256-bit SSL encryption — the same encryption technology used by major banking institutions in Malaysia.

No Data Sales to Third Parties

Bonus138 has never sold, rented, or shared your personal data with advertisers, data brokers, or any third party without your explicit consent.

Full User Control

You have the right to access, correct, delete, or request a copy of your personal data stored at bonus138 at any time through our support team.

Limited Data Retention

Bonus138 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

PDPA Legal Compliance

The bonus138 privacy policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are always protected.

Data Breach Notification

In the event of any security incident involving your data, bonus138 is committed to notifying affected members within a reasonable timeframe in accordance with our incident response procedures.

1. Introduction and Scope of Privacy Policy

Bonus138 ("we", "Platform") takes user privacy very seriously. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use the bonus138 platform — whether through the bonus138.vin website or our official mobile app.

By registering an account or using any bonus138 service, you agree to the collection and use of your personal information as described in this document. This policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This policy applies to all users who register, access, or use bonus138 services from Malaysia. If you disagree with any aspect of this policy, please discontinue use of our platform and contact our support team for assistance in closing your account properly.

This document is part of the bonus138 legal framework, which includes the Terms and Conditions and Responsible Gaming Policy. Reading all three documents together will give you a complete picture of your rights and responsibilities as a member.

2. Types of Personal Data We Collect

Bonus138 collects various types of personal information for the purposes stated in this policy. This information is divided into three main categories:

Data Categories Example Information Collection Method
Identity Data Full name, date of birth, ID card number, passport Registration form, KYC process
Contact Data Email address, phone number, mailing address Account registration, profile updates
Financial Data Bank account number, e-wallet details, transaction history Deposit and withdrawal process
Technical Data IP address, browser type, operating system, device Automatically collected during platform use
Usage Data Game history, betting patterns, active session duration Automatically collected during game sessions
Communication Data Live Chat records, support emails, feedback Interactions with the support team

We do not collect sensitive data such as medical records, religious beliefs, or political views. bonus138 only collects data that is strictly necessary for platform operations and legal compliance.

3. Purposes for Using Your Personal Data

Bonus138 uses your personal data for the following purposes only:

  • Account management: Creating and maintaining your member account, including secure login and identity verification.
  • Transaction processing: Processing deposits, withdrawals, and bonus payments securely and efficiently.
  • Identity verification (KYC): Carrying out Know Your Customer procedures as required by compliance and anti-money laundering regulations.
  • Customer service: Answering inquiries, resolving issues, and providing technical assistance through various support channels.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, platform abuse, money laundering, and unauthorized access.
  • Experience personalization: Personalizing game recommendations, promotions, and content based on your preferences and playing habits.
  • Marketing communications: Sending information about promotions, bonuses, and new offers — with your consent and subject to unsubscribe options.
  • Legal compliance: Meeting legal obligations, regulatory reporting requirements, and directives from relevant authorities.

Bonus138 does not use your data for purposes beyond those stated above without obtaining fresh consent from you.

4. Sharing Data with Third Parties

Bonus138 does not sell or rent your personal data to any third party for commercial purposes. However, in certain limited situations, we may share your data with the following parties:

  • Payment service providers: DuitNow, FPX, Touch 'n Go, GrabPay, and other payment providers required to process your financial transactions.
  • Game providers: Technical information required by game providers such as Pragmatic Play, Evolution Gaming, and others to deliver games correctly.
  • Technical service providers: Hosting companies, CDN providers, and other technology vendors that help us operate the platform — subject to strict confidentiality agreements.
  • Regulatory authorities: When required by law, court order, or directive from a relevant regulatory authority.
  • Fraud prevention agencies: For identity verification, fraud prevention, and compliance with anti-money laundering (AML) requirements.

Every third party that receives your data is required to sign a binding data processing agreement, obligating them to protect your information to the same or higher standard as the bonus138 privacy policy.

5. Data Security and Protection

Bonus138 continuously invests in cybersecurity infrastructure to ensure your personal data is always protected against unauthorized access, loss, modification, or disclosure.

  • All communications between your browser and the bonus138 servers are secured with 256-bit TLS/SSL encryption.
  • Sensitive data such as financial information is stored in encrypted form using industry-recognised encryption algorithms.
  • Access to users' personal data by internal staff is restricted on a "need-to-know" basis and is regularly audited.
  • Our security monitoring system operates 24/7 to detect any suspicious activity in real time.
  • Our data servers are protected by multi-layered firewalls, intrusion detection systems, and strict physical security procedures.
  • Penetration testing is conducted regularly by independent third-party security experts.

While bonus138 takes all reasonable steps to protect your data, no system is 100% foolproof. You also play an important role by using a strong password and not sharing your login credentials.

6. Cookies, Tracking and Similar Technologies

Bonus138 uses cookies and similar tracking technologies to enhance user experience, ensure security, and understand how the platform is used.

  • Essential cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
  • Performance cookies: Collecting information on how players use the platform to help us identify and resolve technical issues.
  • Preference cookies: Remembering your settings and preferences such as preferred language and platform theme.
  • Analytics cookies: Helping us understand aggregate usage patterns to improve the platform — this data is not used to identify individuals.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality or your experience on the bonus138 platform.

7. Your Rights as a User

Under Malaysia's PDPA and bonus138 policy, you have the following rights regarding your personal data:

Right of Access

Requesting a copy of all personal data we hold about you.

Right to Rectification

Requesting correction of inaccurate or incomplete data.

Right to Erasure

Requesting deletion of your data, subject to legal retention requirements.

Right to Object

Objecting to the processing of your data for specific purposes such as direct marketing.

Right to Data Portability

Receiving your data in a machine-readable format for transfer to another platform.

Right to Unsubscribe

Opt out of marketing communications at any time via the unsubscribe option.

To exercise any of the rights above, please contact the bonus138 support team via the 24/7 Live Chat on the platform. We will process your request within a reasonable timeframe and inform you of the action taken.

8. Children's Privacy Protection

The bonus138 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we become aware that personal data of anyone under 18 has been collected through our platform, we will take immediate steps to delete that data and terminate the associated account.

If you are a parent or guardian and have reason to believe that your minor child has registered or used the bonus138 platform, please contact our support team immediately so that appropriate action can be taken without delay.

Registration by individuals under 18 is a serious violation of the bonus138 Terms and Conditions. Such accounts will be terminated immediately and all related information will be deleted from our systems.

9. Amendments to This Privacy Policy

Bonus138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or developments in security technology. When significant changes are made, we will:

  • Publishing an updated version on this page with the latest revision date.
  • Displaying in-platform notifications to inform members of changes made.
  • Sending email notifications to registered members for amendments that materially affect your privacy rights.

Continued use of the bonus138 platform after any changes are published will be considered acceptance of the updated policy. We encourage you to review this page periodically.

10. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding your privacy and personal data protection at bonus138, we welcome you to contact us through the following channels:

  • Live Chat 24/7: The fastest way to get an immediate response from our team — available directly within the bonus138 platform.
  • Support Email: [email protected] — for inquiries requiring more detailed explanation or documentation.

We are committed to responding to all privacy-related enquiries within a reasonable timeframe. For personal rights requests such as data access or deletion, the processing period is within 30 business days from the date a complete request is received.

The bonus138 support team is fluent in Malay and English, ready to assist you with any privacy-related inquiries in a friendly and professional manner.

Safe & Trusted Platform

Your Data is Safe With bonus138

With 256-bit SSL encryption, a transparent privacy policy, and full commitment to Malaysia's PDPA — register with confidence today.

Bahasa Melayu