Betman138 Privacy Policy — Personal Data Protection for Malaysian Players

Betman138 collects several categories of personal data from players during registration, platform use, and financial transactions. All data collected is for legitimate, necessary purposes and is clearly stated in this privacy policy.

Data Collected During Registration:

• Full name as it appears on your official Malaysian identity document (MyKad or passport).
• An active Malaysian mobile number — used for OTP verification and security communications.
• Email address (if provided) — for account-related communications and promotions you have opted in to receive.
• Date of birth — to verify that you are 18 years of age or older before using the betman138 platform.

Data Collected During Platform Use:

• Gaming history — records of bets placed, wins, and losses across all betman138 game categories.
• Transaction history — all deposits and withdrawals made via the Malaysian payment methods you use, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Device and network information — IP address, browser type, operating system, and device identifiers — collected for security and fraud detection purposes.
• Session activity data — pages visited, session duration, and navigation patterns within the betman138 platform, used for user experience improvement purposes.

Data Collected for Identity Verification (KYC):

In certain situations — particularly for withdrawals exceeding specified thresholds or when required for anti-fraud compliance — betman138 may request a copy of identity documents such as your MyKad, passport, or documents verifying the payment method you use. These documents are handled with the highest level of security and retained only for as long as necessary to meet the relevant compliance requirements.

Betman138 uses your personal data only for specific, legitimate purposes that are directly related to delivering platform services to you. Each purpose for data use is set out transparently below.

Betman138 will not use your personal data for any purpose beyond those stated above without notifying you and, where required, obtaining your consent first. If the purpose of use changes materially, you will be informed and given the option to withdraw your consent where applicable.

Betman138 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances where your data may be shared with legitimate parties — and betman138 is fully committed to being transparent about this.

Situations Where Data May Be Shared:

• Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the minimum transaction data required is shared with the respective service provider to process the transaction. All these providers are governed by their own privacy and security policies.
• Game Providers: Third-party game platform providers that supply slots, Live Casino, and other games on betman138 may receive encrypted account identifiers to enable access to their games. These providers do not receive your full name or any financial information.
• Relevant Authorities: betman138 complies with all lawful directions from the relevant Malaysian authorities. Where required by law or a valid court order, data may need to be disclosed. betman138 will endeavour to notify you before any such disclosure, unless prohibited by law.
• Business Development: In the event of a merger, acquisition, or transfer of betman138 assets, user data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

Betman138 invests seriously in data security infrastructure to ensure the personal and financial information of every Malaysian player is protected at all times. The following are the key security measures we have in place:

• Data-in-Transit Encryption: All data transmitted between your browser and betman138 servers is protected by TLS 1.3 with 256-bit SSL encryption — the same level of security used by major banking institutions in Malaysia.
• Stored Data Encryption: Sensitive data stored on betman138 servers — including passwords and financial information — is encrypted using AES-256 standards, making it unreadable even to internal staff without authorisation.
• Two-Factor Authentication (2FA): betman138 provides and actively encourages the use of two-factor authentication for all accounts. This adds an extra layer of security that keeps your account protected even if your password falls into the wrong hands.
• Continuous Security Monitoring: betman138 systems are continuously monitored for suspicious activity, intrusion attempts, and any security threats. Our security team responds to incidents promptly.
• Internal Access Controls: Access to betman138 player data within internal systems is strictly limited to staff who require it to carry out their legitimate duties. All access is logged and audited on a regular basis.
• Regular Security Testing: betman138 conducts regular penetration testing and security audits to identify and address any system vulnerabilities before they can be exploited.

While betman138 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. You also play an important role in keeping your account safe — always use a strong, unique password, enable 2FA, and never share your login details with anyone.

As a betman138 player, you have specific rights regarding your personal data that we handle. betman138 fully respects these rights and provides straightforward mechanisms for you to exercise them.

To exercise any of the rights above, contact the betman138 privacy team by email at support@betman138.best, stating the right you wish to exercise along with your account number. betman138 does not charge for processing reasonable rights requests and will respond within 30 days of receipt.

Betman138 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality, and analyse usage patterns for service improvement purposes.

Types of Cookies Used by betman138:

• Essential Cookies (Required): These cookies are required for the betman138 platform to function properly. They manage your login session, store your language preferences, and maintain session security. They cannot be disabled, as the platform will not work without them.
• Analytics Cookies: betman138 uses analytics cookies to understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and where players commonly encounter issues. This information is used to improve the betman138 platform for a better experience for all Malaysian players.
• Functionality Cookies: These cookies store your personal preferences — such as language settings, chosen betting limits, and display options — so you do not have to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious activity, prevent CSRF attacks, and ensure your session is not hijacked by unauthorized parties.

You can manage or delete cookies through your browser settings. However, disabling essential cookies will affect the functionality of the betman138 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Betman138 does not retain your personal data indefinitely. We define clear retention periods for each data category based on service requirements, legal obligations, and industry best practices.

• Active Account Data: For as long as your account is active with betman138, your basic account data is retained to allow you full use of our services. Once the account is closed, this data is kept for an additional period as required for legal compliance before being permanently deleted.
• Transaction History: Transaction records — including all deposits and withdrawals via Malaysian eWallets and FPX — are retained for the minimum period required by financial compliance and anti-money laundering regulations. This is typically between five and seven years from the date of the transaction.
• Security Log Data: Security logs recording account activity, login attempts, and security events are retained for a sufficient period to enable investigation of any security incidents or fraud that may arise.
• Marketing Data: If you have agreed to receive marketing communications from betman138, the relevant data is retained until you withdraw your consent. Once you opt out, we keep a record of that preference to ensure we do not send you unwanted communications in the future.
• Responsible Gaming Data: Self-exclusion records and play limits you have set are retained even after account closure to ensure your self-exclusion request is honoured should you attempt to re-register with betman138 in the future.

If you have any questions, concerns, or complaints regarding the betman138 Privacy Policy or how we handle your personal data, our privacy team is here to help. We take every privacy enquiry seriously and are committed to providing accurate and satisfactory responses.

How to Reach the betman138 Privacy Team:

• Email: Send your enquiry to support@betman138.best with the subject line "Privacy Policy Enquiry" and include your account number (where applicable). We will respond within 48 hours of receipt.
• Live Chat: For more immediate enquiries, the betman138 support team is available via live chat 24 hours a day, seven days a week. Our support agents can handle general privacy queries and escalate more complex cases to the dedicated privacy team.

Betman138 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or service improvements. Any material updates will be communicated to you via an in-platform notice or email at least seven days before the changes take effect. We recommend reviewing this page periodically. The date of the most recent update is always shown at the top of this document.

By continuing to use the betman138 platform after the effective date of any update to this Privacy Policy, you are considered to have accepted the revised terms. If you do not agree with any changes, please stop using the platform and contact us to close your account and request deletion of the relevant data.