🔒 Data Protection

Privacy Policy hemat138 – We Protect Your Data the Way We Protect Your Wins

At hemat138, your privacy is more than a formality. It is a responsibility we take seriously every day. This document clearly and transparently explains how we collect, use, and protect your personal information as a member of our platform.

Updated: 1 January 2026 Complying with Malaysia's PDPA 256-bit SSL Encryption

Hemat138's Six Data Protection Principles

Hemat138 adopts a comprehensive data protection approach. The following are the core principles that shape how we manage members' personal information.

Advanced-Grade Encryption

All personal data and financial transactions are protected by 256-bit SSL encryption — the same security technology used by leading banking institutions in Malaysia.

No Data Sales

Hemat138 has never and will never sell, rent, or lend members' personal data to any third party for marketing or any other commercial purpose.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Requests are straightforward and processed within 14 working days.

Malaysia PDPA Compliance

The hemat138 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We ensure our data management practices remain aligned with current legal requirements at all times.

Real-Time Threat Detection

Hemat138's security monitoring system operates 24 hours a day to detect and prevent any unauthorized access attempts to our members' personal data.

Minimal Data Retention

Hemat138 only retains personal data for as long as necessary for the stated purposes. Data that is no longer needed is securely deleted in accordance with strict procedures.

Important Notice About This Policy

By using the hemat138 platform, you agree to the collection and use of your information as described in this Privacy Policy. Please read this document carefully. If you have any questions, our support team is available via 24/7 Live Chat.

1

Information We Collect From You

Hemat138 collects the personal information needed to provide you with a safe, efficient, and personalized service. We only collect data that is truly necessary and never request information irrelevant to your use of the platform.

Information You Provide Directly

  • Registration information: Full name, date of birth, phone number, email address, and residential address.
  • Identity verification documents: A copy of your MyKad or passport for the KYC (Know Your Customer) process.
  • Financial information: Bank account number, account holder name, and eWallet details for deposit and withdrawal processing.
  • Communication: Records of conversations with our customer support team.

Automatically Collected Information

  • Technical data: IP address, browser type, operating system, and screen resolution.
  • Activity data: Login records, game history, deposit and withdrawal transactions.
  • Device data: Device type, model, and unique device identifier (for mobile access).
  • Location data: General location based on IP address for verification and security purposes.
Data Category Collection Purpose Required / Optional
Name & Date of Birth Identity Verification & KYC Required
Email Address Communication & Account Recovery Required
Phone Number 2FA Verification & Support Required
Bank / eWallet Information Withdrawal processing Required for withdrawal
MyKad Copy KYC & AML Compliance Required for withdrawal
Game Preferences Personalize Content Optional
2

How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. hemat138 uses your personal data solely for the purposes stated below — nothing more, nothing less.

  • Account management: Creating, verifying, and managing your member account on the hemat138 platform.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Identity verification (KYC): Meeting legal and regulatory compliance requirements and preventing fraud and money laundering.
  • Service provision: Allowing you to access all games and platform features seamlessly.
  • Customer support: Processing and responding to your inquiries or complaints promptly and accurately.
  • Personalization: Personalizing content, promotions, and game recommendations based on your preferences.
  • Platform Security: Detecting and preventing fraudulent activity, abuse, and security threats.
  • Legal compliance: Fulfilling applicable legal and regulatory obligations.

Hemat138 does not use your data for third-party advertising. We may send you promotions and offers from hemat138 itself — and you can opt out of receiving marketing communications at any time through your account settings.

3

Information Sharing with Third Parties

Hemat138 does not sell, rent, or disclose your personal data to third parties except in the following limited and legitimate circumstances:

  • Payment service providers: Required transaction information is shared with payment processors (such as DuitNow and FPX gateways) solely to complete your transaction.
  • Technology service providers: Technology partners who help operate the platform infrastructure, bound by strict confidentiality agreements.
  • Legal authority: When required by law, court order, or direction from a legitimate regulatory authority.
  • Identity verification: Recognized third-party KYC verification services to ensure the validity of identity documents.

All third parties we work with are required to sign data protection agreements that uphold the same high security standards as hemat138 itself. They are not permitted to use your data for any other purpose.

4

Our Data Security Measures

Protecting your personal data is hemat138's top priority. We continuously invest in the latest security technologies and practices to keep your information safe at all times.

  • 256-bit SSL Encryption: All data transmitted between your browser and hemat138's servers is protected by the highest level of encryption.
  • Two-factor authentication (2FA): An additional security layer to protect your account from unauthorized access.
  • Continuous monitoring: An automated security monitoring system operates 24/7 to detect suspicious activity.
  • Internal access controls: Only designated staff with a legitimate work need are permitted to access members' personal data.
  • Regular security audits: Independent security assessments are conducted regularly by third-party cybersecurity experts.
  • Secure data backup: Data is backed up regularly and stored at a secure, separate location.

While we take the most comprehensive measures, no security system can guarantee 100% protection. In the event of any data breach affecting your information, hemat138 is committed to notifying you within the timeframe required by law.

5

Cookies & Tracking Technologies

Hemat138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored in your browser when you visit our website.

Types of Cookies We Use

  • Essential cookies (required): Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
  • Performance cookies: Collecting information about how you use the platform to help us improve its performance.
  • Functional cookies: Saving your preferences such as game choices and display settings for a better experience.
  • Analytics cookies: Helping us understand aggregate usage patterns to improve the platform.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect certain features of the hemat138 platform. A guide to managing cookies is available in your browser settings page.

6

Your Rights as a hemat138 User

Under Malaysia's Personal Data Protection Act (PDPA) and hemat138's policy, you have the following rights regarding your personal data:

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request correction of any personal data that is inaccurate or out of date.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances as defined by law.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another platform.

To exercise any of the rights above, contact the hemat138 customer support team via Live Chat or email. Requests will be processed within 14 working days. We may require identity verification before processing your request.

7

Special Protection: Children's Data

Hemat138 takes the protection of children's privacy very seriously. Our platform is not designed for use by individuals under the age of 21, and we do not intentionally collect personal data from this group.

  • Registering on the hemat138 platform requires age verification during the KYC process.
  • If we find that a child's data has been collected unintentionally, that information will be deleted immediately.
  • Parents or guardians who find that their child has registered on our platform are requested to contact hemat138 customer support immediately.
8

Data Retention Period

Hemat138 only retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law.

Data Type Retention Period Reason
Active account information Throughout the active account period Service provision
Financial transaction records 7 years after transaction Tax law & AML compliance
KYC Documents 5 years after account closure Regulatory Compliance Requirements
Support communication logs 2 years Service quality assurance
Non-essential cookie data 13 months Platform usage analytics

After the relevant retention period expires, data will be securely deleted or anonymized in accordance with hemat138's data disposal procedures.

9

Changes to This Privacy Policy

Hemat138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a clear notice on the platform's home page for a reasonable period.
  • Sending a notification to your registered email address if the changes materially affect your privacy rights.

Continued use of the hemat138 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

10

Contact Us About Your Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or hemat138's management of your personal data, we welcome you to reach us through the following channels:

Live Chat

Available 24/7 via the chat icon at the bottom of the platform. Response in under 3 minutes.

Email

[email protected] – Replied within 24 business hours for privacy-related inquiries.

All privacy and data protection requests are handled by our specially appointed Data Privacy Officer. We are committed to responding to all privacy-related inquiries within 14 working days.

Your Data Is Safe, Your Gaming Is Fun

Hemat138 protects your privacy to the highest standards so you can focus on what matters — enjoying the best games in Malaysia.

Bahasa Melayu