We take our responsibility to protect your personal data seriously. This document transparently explains how online138 collects, uses, stores, and safeguards your information as a user of our platform.
Six core principles that underpin how we handle your data
Online138 only collects data that is strictly necessary for platform operations. We do not collect excessive information or information irrelevant to the services you are using.
All personal and financial data stored on online138 servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions worldwide.
Your personal data is never sold to third parties for any purpose. We do not work with external advertising companies or data brokers under any circumstances.
You have full rights to access, correct, or request deletion of your personal data at any time. Our team will handle such requests promptly and professionally.
Your data is stored in fully secured data centres with strict physical and digital access controls. Internal access to user data is restricted, logged, and regularly audited.
The online138 Privacy Policy is developed in line with applicable data protection legislation. We continuously update our privacy practices to keep pace with the latest legal and technological developments.
This Privacy Policy is published by the operator of the online138 platform, which operates through the official website at online138.vin. This document explains in detail how we collect, use, disclose, and protect the personal information you provide to us when using our platform and services.
We understand that privacy matters deeply to every user. At online138, we don't treat this as merely a legal obligation — it is part of our commitment to building long-term trust with our user community in Malaysia.
This policy applies to all personal information we collect through the website, mobile app (if available), customer support channels, and any other interactions between you and online138. If you disagree with any part of this policy, please discontinue use of the platform.
Online138 collects various types of data from users depending on the context of use and operational requirements. The following are the main categories of data we collect:
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identification Data | Full name, date of birth, identification card number, selfie photo | Identity verification (KYC) and fraud prevention |
| Contact Data | Phone number, email address, residential address | Communication and delivery of important notifications |
| Financial Data | Bank account details, deposit and withdrawal records | Transaction processing and anti-money laundering compliance |
| Usage Data | Gaming records, login times, in-platform activity | Platform improvement and suspicious activity detection |
| Technical Data | IP address, device type, web browser, cookies | Security, location verification, and performance optimisation |
The personal data we collect is used for legitimate and specific purposes. We will not use your data for any other purpose without obtaining your consent first. The primary purposes of data use are as follows:
Every use of data is grounded in a lawful basis — whether to fulfil a contract, meet a legal obligation, serve our legitimate interests, or based on consent you have voluntarily provided.
The security of your data is the top priority for online138. We invest seriously in cybersecurity infrastructure to ensure your information is always protected from unauthorised access, breaches, or misuse.
The technical security measures we implement include:
Online138 does not sell your personal data to anyone, under any circumstances. However, there are certain situations where we need to share some of your information with carefully selected third parties for legitimate operational purposes:
All third parties that receive online138 user data are required to comply with strict confidentiality agreements and are only permitted to use that data for the specified purposes. We conduct due diligence on all our data processing partners.
The online138 platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and understand how users interact with our platform.
Types of cookies we use:
As an online138 platform user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
To exercise any of the rights above, please contact the online138 customer support team. We will process your request within a reasonable timeframe and in accordance with applicable legal requirements.
The online138 platform is strictly reserved for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals below this age limit.
A strict KYC process is carried out during registration to ensure all users meet the minimum age requirement. Valid identification documents are required to verify the applicant's age before an account is fully activated.
Online138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We will notify you of any material amendments via in-platform notifications or by email to the address registered to your account.
The "Last Updated" date shown at the top of this document indicates when the most recent amendments were made. We encourage you to review this policy periodically to stay informed about how we handle your data.
Your continued use of the online138 platform after any amendments are published constitutes your acceptance of the revised policy. If you disagree with the amendments, you have the right to discontinue use of the platform and close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the online138 customer support team is available to assist you at any time.
You can reach us via:
We are committed to responding to all privacy-related enquiries within 3 business days. For more complex complaints requiring in-depth investigation, we will provide a more specific timeframe when you contact us.