Hadiah138 Privacy Policy — Malaysian Member Data Protection

This Privacy Policy ("Policy") describes how hadiah138 ("we", "platform" or "hadiah138") collects, uses, stores and protects your personal data when you use the hadiah138.my website and all related services.

The hadiah138 Privacy Policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international industry best practices. We take every member's privacy seriously and are committed to handling your personal data in a transparent, secure and responsible manner at all times.

This Policy applies to all individuals who:

• Visiting or using the hadiah138.my website
• Registering for or holding a hadiah138 member account
• Making any financial transaction through the hadiah138 platform
• Contacting the hadiah138 customer support team through any channel
• Participating in any hadiah138 promotions, contests or loyalty programmes

By using the hadiah138 platform, you consent to the collection and use of your personal data as described in this Privacy Policy.

Hadiah138 collects personal data from members through two primary methods — information you provide directly and information collected automatically when you use our platform.

Hadiah138 only uses your personal data for legitimate, necessary purposes that have been made known to you. Below is the full list of purposes for which personal data is used on the hadiah138 platform:

• Identity and account verification: Verifying your identity during registration, login and the KYC (Know Your Customer) process as required by Malaysian law for financial platforms
• Transaction processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via DuitNow, Touch 'n Go, GrabPay, FPX and other Malaysian payment methods
• Account management: To manage hadiah138 member profiles, balances, game history and account settings
• Customer support: Assists in resolving enquiries, complaints and technical issues submitted via live chat, email or WhatsApp
• Promotions and bonuses: To send you relevant bonus offers, promotions, and hadiah138 updates based on your gaming preferences
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering and unauthorised use of the platform
• Legal compliance: To meet applicable legal and regulatory obligations in Malaysia
• Platform improvements: Analysing usage patterns to enhance the user experience on hadiah138

Hadiah138 does not sell, rent or trade your personal data to any third party for marketing purposes. Your personal data is only shared in limited, necessary circumstances as follows:

• Payment service providers: Approved payment gateways to process your MYR deposit and withdrawal transactions — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay providers
• Game software providers: Licensed game providers supplying slots, Live Casino, Poker and other games on hadiah138 require minimal data to operate those games
• Cloud services and infrastructure: Server and cloud storage providers that support hadiah138's technical operations, subject to strict confidentiality agreements
• Legal authorities: Malaysian law enforcement agencies or regulatory bodies where required by law or a valid court order
• Identity verification services: Third-party providers that assist in verifying member identities as part of the hadiah138 KYC process

All third parties handling hadiah138 member data are required to comply with strict data security standards and are not permitted to use that data for any purpose other than those specified in their service agreement with hadiah138.

Hadiah138 invests heavily in security infrastructure to ensure every member's personal data is protected at all times. The technical and organisational security measures we have in place include:

• 256-bit SSL encryption: All communications between your browser and hadiah138 servers are encrypted using the latest TLS 1.3 protocol
• Data-at-rest encryption: Personal data stored in the hadiah138 database is encrypted using AES-256 algorithm
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their hadiah138 account
• 24/7 Monitoring: The hadiah138 security team continuously monitors the system to detect any suspicious activity or unauthorised access attempts
• Internal access controls: Only authorised hadiah138 staff who have passed background checks may access member personal data, strictly on a need-to-know basis
• Periodic security audits: Hadiah138 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities

Hadiah138 uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns and ensure platform security. Cookies are small text files stored on your device when you visit hadiah138.my.

Types of cookies used by hadiah138:

• Essential cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled without affecting the website's functionality
• Performance cookies: To gather information on how visitors use hadiah138.my, such as the most frequently visited pages and error messages encountered. All information is aggregated and anonymised
• Functional cookies: Allows hadiah138 to remember your preferences — such as language, region and display settings — to deliver a more personalised experience
• Analytics cookies: Helping us understand how members interact with the hadiah138 platform so we can continuously improve our services

You can control or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the hadiah138 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), every hadiah138 member has the following rights regarding their personal data:

To exercise any of the above rights, submit a written request to support@hadiah138.my with the subject line "Privacy Rights Request". Hadiah138 will process your request within 14 business days.

Hadiah138 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law. The following guidelines apply to our data retention periods:

Once the retention period has ended, your personal data will be securely deleted or permanently anonymised so it can no longer be associated with you.

Hadiah138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, the latest legal requirements in Malaysia, or new technological developments. You will be notified of any material changes through:

• Email notifications sent to your registered email address
• An in-platform notification on hadiah138 the next time you log in
• Updates to the "Last Updated" date at the top of this page

Your continued use of the hadiah138 platform after any policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

If you have any questions, concerns or complaints regarding how hadiah138 handles your personal data, we encourage you to contact us directly first:

If you are not satisfied with hadiah138's response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.