128casino Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

01Personal Information We Collect

128casino collects various types of information from members for account management, payment processing, platform security, and service improvement. We only collect what is strictly necessary and never ask for more than we need.

Information you provide directly:

• Full name as shown on your identification document (MyKad or passport)
• An active Malaysian mobile number (for OTP verification and service communications)
• A valid and accessible email address
• Date of birth (for age verification – you must be 18 years of age or older)
• Bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks) for deposit and withdrawal processing
• Identity verification (KYC) information when required – including copies of your MyKad and proof of address

Automatically collected information:

• Your device's IP address and general geographic location (state, not exact address)
• Device type, operating system, and web browser used
• Platform activity records – games played, bets placed, session duration
• Login records – date, time, and location of each login
• Cookie data and similar tracking technologies (see Section 05)

02How 128casino Uses Your Data

All data collected by 128casino is used responsibly and solely for legitimate purposes. We never use your data for anything unrelated to the services you have subscribed to without your explicit consent.

Your personal data is used for the following purposes:

• Account Management: Creating, maintaining, and securing your 128casino account, including identity verification and account recovery.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, as well as managing withdrawals of winnings to your account.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and platform abuse.
• Legal Compliance: Fulfilling our PDPA compliance obligations, AML (Anti-Money Laundering) requirements, and applicable KYC standards.
• Service Improvement: Analyzing usage patterns (in aggregate and anonymized form) to improve the 128casino platform's interface, performance, and overall user experience.
• Service Communications: Sending important notifications about your account, policy updates, and security information via SMS or email.
• Promotions & Marketing: Sending relevant 128casino bonus offers and promotions – you can opt out of marketing communications at any time.

03Information Sharing & Disclosure

128casino does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is a core principle we have never compromised on.

However, in certain situations, we may need to share some of your information with the following parties:

• Payment Service Providers: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks for processing your financial transactions. They are subject to their own privacy policies and Bank Negara Malaysia regulations.
• Game Providers: Live casino game studios and slots providers that supply games to the 128casino platform may receive session data required for technical operations – no financial information is shared.
• Regulatory Bodies & Law Enforcement: When required by Malaysian law, court order, or a legitimate request from a law enforcement agency.
• Technical Service Providers: Companies supporting our IT infrastructure, cybersecurity, and analytics – all bound by strict confidentiality agreements with 128casino.

04Data Security Measures

128casino invests seriously in security infrastructure to protect members' personal data from both internal and external threats. The following are the key security layers we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and 128casino's servers is encrypted using the latest TLS 1.3 protocol – the same technology used by Malaysia's major banks.
• Data-at-Rest Encryption: Sensitive information such as payment details is stored in encrypted form in our database. 128casino staff cannot view your full bank account or e-wallet number.
• Two-Factor Authentication (2FA): Members can enable 2FA through their account settings for an extra layer of protection at login.
• Real-Time Monitoring: Our anomaly detection system continuously monitors your account for unusual activity and will send an immediate alert if unauthorised access is suspected.
• Restricted Staff Access: Only authorised 128casino staff who have completed rigorous security training have access to member data – and only to the portions relevant to their specific role.
• Regular Security Audits: The 128casino platform undergoes regular independent security assessments to identify and address any system vulnerabilities.

While we take all reasonable precautions, no system is 100% secure. You also play an important role in keeping your account safe by using a strong password and never sharing your login details with anyone.

05Cookies & Tracking Technologies

128casino uses cookies and similar technologies such as web beacons and tracking pixels to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions – login, gaming sessions, and payment processing. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how members use the platform so we can improve it. Data is collected in aggregate and anonymized form.
• Functional Cookies: Saves your preferences such as language, theme, and display settings for future sessions.
• Marketing Cookies (Optional): Used to display relevant 128casino promotions. You can decline these cookies without affecting your access to any games.

You can control or delete cookies through your web browser settings. However, disabling mandatory cookies may affect certain functions on the 128casino platform.

06Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding your personal data held by 128casino. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact our privacy team at support@128casino.bet with the email subject "Data Privacy Request". We will respond within 14 business days.

07Data Retention & Deletion Period

128casino does not retain your personal data for longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and our legitimate interests as a platform operator.

• Active Account Data: Retained for the duration your account remains active and for a reasonable period after account closure for audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after each transaction, in line with Malaysia's AML compliance requirements and tax laws.
• Security & Activity Logs: Retained for 2 years for fraud detection and security incident investigation purposes.
• Support Communication Data: Communication records with the 128casino support team are retained for 1 year for quality control purposes.
• Marketing Data: Retained until you opt out of marketing communications or explicitly request deletion.

When data is no longer needed and there is no legal obligation to retain it, 128casino will securely delete or anonymise that data using industry-approved procedures.

08Changes to This Privacy Policy

128casino reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies we adopt. We are committed to keeping members informed of any material changes.

When significant changes are made to this Privacy Policy:

• We will update the "Last Updated" date at the top of this document
• Material changes will be communicated via in-platform notifications and/or email to all active 128casino members
• For changes that require renewed consent, we will seek your explicit confirmation before those changes take effect on your account

We encourage you to review this page periodically. Continued use of the 128casino platform after any changes take effect will be considered acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data.