OFFICIAL mr138 DOCUMENTS

Privacy Policy MR138 —
Member Personal Data Protection

Your privacy is not merely a legal obligation for us — it is the foundation of trust that builds the relationship between mr138 and every member. This document transparently explains how we collect, store, use, and protect your information.

Updated: January 2026
Bahasa Melayu
256-bit SSL

Our Commitment to Your Privacy

Six core principles that shape how mr138 handles every member's personal data responsibly

Advanced Data Encryption

All data transmitted between your device and mr138 servers is encrypted using 256-bit SSL standards. This means your personal and financial information cannot be intercepted or read by any third party in transit.

Secure Data Storage

Members' personal data is stored on servers protected by multi-layered firewalls, strict access controls and intrusion detection systems (IDS) operating around the clock. Only authorised personnel may access member data for legitimate operational purposes.

No Sale of Data to Third Parties

MR138 does not sell, rent or share member personal information with third parties for marketing purposes without your explicit consent. Your data is only shared with operational partners necessary to deliver services to you.

Full Control in Your Hands

As an mr138 member, you have the right to access, correct, download, and request deletion of your personal data at any time. We believe you deserve to know what we store, and you have every right to control it.

Limited & Purpose-Bound Data Use

MR138 only collects data that is strictly necessary to deliver our services, fulfil legal obligations and improve your experience. We do not collect excessive data, and every use of data has a clear and legitimate purpose.

Data Breach Notification

In the event of any security incident affecting members' personal data, mr138 is committed to notifying affected members within the timeframe required by applicable data protection laws. Transparency in critical situations is our priority.

This Privacy Policy forms part of the mr138 Terms and Conditions. By using our platform, you agree to the data collection and usage practices described in this document.

1 Introduction

MR138 ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy explains our practices for collecting, using, disclosing and protecting your personal information when you register and use the MR138 online casino platform.

This document is written in plain language because we believe transparency is the foundation of trust. Every statement in this policy reflects practices we actually implement — not mere legal declarations.

This policy applies to all information collected through the mr138 website, mobile app, customer support services and any other interaction channels between you and our platform.

2 Data We Collect

MR138 collects various categories of information depending on your interactions with the platform. Below is a detailed breakdown of the types of data we collect:

Personal Identification Information

  • Full name as shown on official identification documents
  • Date of birth (for age verification)
  • Identity card or passport number
  • Current residential address
  • Mobile phone number
  • Active email address

Financial Information

  • Bank account number or eWallet details (Touch 'n Go eWallet, GrabPay, Boost)
  • Deposit and withdrawal transaction history
  • Betting records and gaming activity

Technical & Usage Data

  • IP address and geographic location (state/city level only)
  • Device type, operating system and web browser used
  • Access logs, session duration and pages visited
  • Cookie data and device identifiers
Data Category Primary Purpose Legal Basis
Personal Identification KYC verification, fraud prevention Legal obligation
Finance Payment processing, withdrawals Contract performance
Technical Security, service improvement Legitimate interest
Communication Customer support, notifications Contract performance
Marketing Relevant promotional offers Your consent

3 How We Use Your Data

MR138 uses collected data solely for legitimate and necessary purposes. Below is a full breakdown of how your information is used in our platform operations:

  • Identity Verification (KYC): To verify member identity, fulfill anti-money laundering (AML) legal requirements, and ensure every account is owned by a legitimate individual aged 18 and above.
  • Transaction Processing: To process deposits, withdrawals, and all other financial transactions securely and in a timely manner.
  • Fraud Detection: To identify and prevent fraudulent activity, money laundering, duplicate accounts, and any misuse of the platform.
  • Customer Support: To respond to inquiries, resolve complaints, and provide technical assistance to members.
  • Platform Improvements: To analyze usage patterns and improve platform features, user experience, and technical performance.
  • Communication: To send account-related notifications, security alerts, promotional updates (where you have consented), and other important announcements.
  • Legal Compliance: To fulfill reporting obligations to the relevant regulatory bodies and authorities in accordance with licensing requirements and applicable laws.

4 Data Sharing with Third Parties

MR138 does not sell or rent member personal data to any third party. However, in the context of normal platform operations, data may be shared with the following categories of third parties under limited and controlled circumstances:

  • Payment Service Providers: Banks, card processing companies and eWallet providers that process your financial transactions. They receive only the minimum data necessary to complete each transaction.
  • Game Software Providers: Companies such as Pragmatic Play, Evolution Gaming, and others that supply games to our platform. They may receive member unique identifiers for the purpose of game record logging.
  • KYC Verification Services: Third-party identity verification service providers that help us securely verify member identification documents.
  • Legal Authorities: We will disclose data to regulatory bodies, law enforcement or courts when required by law or a valid court order.
Important: All mr138 third-party partners are bound by strict data protection agreements and are prohibited from using member data beyond the scope contractually permitted.

5 Data Security

MR138 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, loss, destruction or disclosure. Among the security measures we have in place:

  • 256-bit SSL Encryption for all data communications between your browser and our servers.
  • At-rest data encryption for all sensitive data stored in our databases.
  • Two-factor authentication (2FA) available for all member accounts and mandatory for internal administrative access.
  • Regular security audits conducted by independent cybersecurity firms to identify and remediate vulnerabilities.
  • Role-based access control (RBAC) ensuring only authorized personnel can access member data in accordance with their job responsibilities.
  • 24/7 Monitoring by an automated threat detection system capable of identifying and responding to suspicious activity in real time.
While we implement comprehensive security measures, no system can guarantee absolute security. We encourage members to also take proactive steps such as using strong passwords and enabling 2FA on their accounts.

6 Cookies & Tracking Technologies

MR138 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. There are several types of cookies in use:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and security preferences. These cookies cannot be disabled.
  • Performance Cookies: Collect information about how you use the platform (pages visited, time spent) to help us improve performance and the user experience.
  • Functional Cookies: Store your preferences such as language, display format and other settings to provide a more personalised experience.
  • Analytics Cookies: Used together with internal analytics tools to understand aggregate usage patterns and inform platform improvement decisions.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's documentation.

7 Data Retention

MR138 retains your personal data for as long as your account is active or as long as necessary to deliver services to you. Specific retention periods are as follows:

  • Active Account Data: Retained for the duration of your active membership.
  • Financial Transaction Data: Retained for minimum 5 years after a transaction occurs, in compliance with anti-money laundering (AML) legal requirements.
  • KYC Data: Retained for a minimum of 5 years after the business relationship ends, in accordance with licensing requirements.
  • Technical Logs: Retained for a maximum of 12 months for security and incident investigation purposes.
  • Communication Data: Retained for 2 years for customer support reference purposes.

Once the retention period expires, data will be securely deleted or anonymised in accordance with established procedures.

8 Your Rights as a User

As an mr138 member, you hold the following rights regarding your personal data. You may submit any request related to these rights through our customer support channels:

Right to Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Correct any inaccurate or incomplete data in our records.

Right to Erasure

Request the deletion of your personal data, subject to our legal obligations.

Right to Data Portability

Request your data in a machine-readable format for transfer to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Restriction of Processing

Request that we restrict the processing of your data while a dispute or review is in progress.

MR138 will process all data rights requests within 30 working days from the date the request is received. Complex requests may require additional time, and we will notify you accordingly.

9 Child Privacy

The mr138 Platform exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we determine that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered on our platform are urged to contact our support team immediately.

10 Privacy Policy Amendments

MR138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this document.
  • Display a clear notice on the platform's home page at least 14 days before the changes take effect.
  • Send notification emails to all active members for significant changes.

Continued use of the MR138 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may reach our team through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
  • Email: [email protected] (response within 1–2 business days)
  • FAQ Page: Refer our FAQ page for answers to frequently asked questions about privacy and data security.

We take every privacy complaint seriously and will investigate and respond to all enquiries within a reasonable timeframe. Your satisfaction and confidence are our top priority.

🔒

Your Privacy Protected, Your Experience Secured

MR138 builds a platform you can fully trust. Your data is protected, your privacy respected. Join the growing MR138 member community today.

256-bit SSL Encryption No Data Sales Secure KYC 24/7 Support
Bahasa Melayu