🔒 Official Privacy Document

Privacy Policy bonus138

Bonus138 takes our responsibility to protect your privacy seriously. This document transparently explains how we collect, use, store, and safeguard the personal information of every member on our platform.

Updated: January 2026

Commitment Privacy We

Six core principles that shape how bonus138 manages and protects your data.

🔐

256-bit SSL Encryption

All data transmitted between your device and bonus138 servers is encrypted using 256-bit SSL — the same encryption standard used by financial institutions and major banks in Malaysia.

🚫

No Data Sales

Bonus138 has never sold, rented, or commercialised your personal information to third parties for marketing purposes. Your data belongs to you — it is not our commodity.

⚖️

Malaysia PDPA Compliance

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data processing is carried out on a valid and accountable legal basis.

👁️

Full Transparency

We clearly explain what data is collected, why it is collected, and how it is used. No data processing takes place behind the scenes without your knowledge.

✋

Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Contact our support team and your request will be processed within the stipulated timeframe.

🛡️

24/7 Security Monitoring

The bonus138 cybersecurity team monitors our systems around the clock to detect and prevent any unauthorised access, data breaches, or digital security threats.

1

Privacy Policy Introduction & Scope

This Privacy Policy is issued by bonus138 and applies to all individuals using our platform – including website visitors, registered members, and any party interacting with our services via the website, mobile app, or other digital channels provided by bonus138.

We recognise that trust is the foundation of the relationship we build with every member. As such, we are committed to processing your personal data responsibly, transparently, and in compliance with applicable laws – including Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards.

By continuing to use the bonus138 platform, you confirm that you have read and understood this Privacy Policy and agree to the way we process your personal data as described herein.

2

Types of Personal Data We Collect

Bonus138 only collects data that is strictly necessary to deliver our services safely and effectively. The following are the categories of data we collect:

Category Data Examples Collection Method
Personal Identity Full name, date of birth, MyKad / passport number Account registration, KYC process
Contact Information Email address, phone number, mailing address Registration, profile updates
Financial Data Bank account details, e-wallet, transaction records Deposit and withdrawal process
Technical Data IP address, browser type, operating system, device ID Automatically collected during use
Usage Data Game history, betting activity, platform activity Automatically generated during gameplay
Communication Support chat records, emails, feedback Interactions with our team

We do not collect sensitive data such as medical information, religious beliefs, or political views unless it is directly relevant to service requirements and you provide explicit consent.

3

Purpose of Collection & Data Usage

The personal data we collect is used solely for the following purposes – and will not be used for any other purpose without notice and, where required, your consent:

  • Account Management: Create, verify, and manage your member account on the bonus138 platform.
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
  • Identity Verification (KYC): Meet legal requirements to verify member identities in order to prevent fraud and money laundering.
  • Service Provision: Provide access to games, promotions, and all platform features you registered for.
  • Customer Support: Handle enquiries, complaints, and support requests you submit to us.
  • Platform Security: Detect and prevent fraud, unauthorised use, and security threats.
  • Legal Compliance: Fulfil legal and regulatory obligations applicable to our operations.
  • Service Improvement: Analyse aggregate and anonymised usage patterns to improve the platform.

Important Note: We may send you promotional communications via email or in-app notifications. You may opt out of receiving promotional communications at any time by contacting our support team.

4

Legal Basis for Data Processing

All personal data processing by bonus138 is carried out on a valid legal basis. We rely on the following bases as appropriate to each situation:

  • Contract Performance: Processing required to fulfil the service agreement between you and bonus138, such as processing your financial transactions.
  • Legal Obligations: Processing required to comply with our legal obligations, including AML (Anti-Money Laundering) and KYC requirements.
  • Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes that does not affect your fundamental rights.
  • Consent: For certain processing activities such as direct marketing communications, we obtain your explicit consent beforehand.
5

Data Sharing with Third Parties

Bonus138 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, there are limited situations where we may need to share your data:

  • Service Providers: Third parties that assist us in delivering our services — such as payment processors, gaming software providers, and cloud infrastructure providers. They are bound by strict data protection agreements and may only use your data for specified purposes.
  • Law Enforcement Body: We are required to disclose information when mandated by law, court order, or official request from a legitimate authority.
  • Industry Regulatory Body: Information required for licensing, auditing, and regulatory compliance purposes within the gaming industry.
  • Fraud Prevention: Limited sharing with industry bodies to detect and prevent fraudulent activity across platforms.

Every third-party service provider with access to member data is required to sign a data processing agreement that sets out strict data protection responsibilities in line with the standards we uphold.

6

Data Security Measures

We continuously invest in security infrastructure to protect your data from unauthorised access, loss, or disclosure. Key security measures we employ include:

  • Transmission Encryption: All data communication uses TLS 1.3 protocol with 256-bit SSL encryption.
  • Storage Encryption: Sensitive data is stored in encrypted form within databases protected by multiple security layers.
  • Strict Access Controls: Only staff who require access to specific data to perform their duties are granted access permissions.
  • Two-Factor Authentication: Our internal systems use two-factor authentication (2FA) for all administrative access.
  • Periodic Audits: Security assessments and penetration testing are conducted periodically by independent specialists.
  • Real-Time Monitoring: A threat detection system operating 24/7 to identify suspicious activity.

While we implement comprehensive security measures, no digital system can guarantee 100% absolute security. We encourage you to also safeguard your password and login credentials by not sharing them with anyone.

7

Data Retention Period

Bonus138 retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Our general data retention guidelines are as follows:

  • Active Account Data: Retained for as long as your account is active and in use.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements.
  • KYC & Identity Data: Retained for 5 years after account termination to fulfil AML obligations.
  • Communication Logs: Retained for 2 years for dispute resolution and quality control purposes.
  • Technical Data: Access logs and technical data are retained for 90 days before being automatically deleted.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to your identity.

8

Cookies, Pixels, & Tracking Technologies

The bonus138 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymised information about how you use the platform to help us identify areas for improvement.
  • Functional Cookies: Remember your preferences such as language and display settings so you do not need to reconfigure them each time.
  • Analytics Cookies: Help us understand aggregate usage patterns to improve platform content and structure.

You can manage cookie settings through your internet browser options. However, disabling essential cookies may affect certain platform functions.

9

Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA and applicable privacy standards, you hold the following rights regarding your personal data held by bonus138:

Right of Access Request a copy of the personal data we hold about you.
Right to Rectification Request correction of inaccurate or incomplete data.
Right to Erasure Request deletion of your data under circumstances permitted by law.
Right to Restriction Request restriction of data processing in certain qualifying situations.
Right to Portability Receive your data in a structured, reusable format.
Right to Object Object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, please contact our privacy team via support email or live chat. We will process your request within 30 days of receipt.

10

Links to Third-Party Websites

The bonus138 platform may contain links to third-party websites or services. This Privacy Policy applies only to data collected and processed by bonus138. We are not responsible for the privacy practices of any third-party websites you visit through links on our platform.

We encourage you to read the privacy policy of every website you visit, especially if you provide any personal information to them. bonus138 has no control over the content or data practices of those third-party websites.

11

Children & Underage Individuals

The bonus138 platform is strictly for adults aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

Should we discover that we have collected personal data from an individual below the minimum age requirement without proper age verification, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who becomes aware that a minor under your care has registered on our platform, please contact us immediately at [email protected] so we can take the appropriate action.

12

Amendments to This Privacy Policy

Bonus138 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features. The latest version will always be published on this page.

For significant amendments that materially affect how we process your data, we will notify you via in-platform notification or email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the amended terms.

The "Updated" date shown at the top of this page reflects the date this Privacy Policy was last reviewed or modified.

13

How to Contact Us

If you have any questions, concerns, or wish to exercise your data rights, please contact the bonus138 privacy team through the following channels:

  • Privacy Email: [email protected] (displayed as text — please type manually)
  • Live Chat: Available 24/7 directly within the bonus138 platform
  • Official Telegram: Via the official bonus138 Telegram channel

Privacy rights requests will be acknowledged within 48 hours and resolved within 30 days of receipt. For more complex requests, we will notify you if additional processing time is required.

This Privacy Policy is governed by Malaysian law. Any privacy disputes that cannot be resolved through negotiation may be referred to the Malaysian Personal Data Protection Commissioner or the relevant tribunal.

Your Data Is Safe with bonus138

Join over 500,000 members who have trusted bonus138 as a safe and reliable online betting platform in Malaysia.

Bahasa Melayu