Important Note: This Privacy Policy explains how Koin138 handles your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the Koin138 platform, you consent to us processing your data as described below. Please read carefully.
1
Personal Information We Collect
When you register or use Koin138 services, we collect several categories of information to keep your account secure, ensure smooth transactions, and provide a more organised gaming experience. This is standard practice for all responsible online financial and entertainment platforms.
The categories of information we collect are as follows:
| Data Categories |
Information Examples |
Purpose of Collection |
| Identity Data |
Full name, date of birth, gender, identification card number |
KYC verification and member eligibility |
| Contact Data |
Email, phone number, state of residence |
Transaction communications and notifications |
| Financial Data |
Bank name, account number (for withdrawals only) |
Deposit and withdrawal processing |
| Technical Data |
IP address, device type, web browser, operating system |
Account security and fraud detection |
| Usage Data |
Game history, active time, favourite games |
Platform improvements and personalised recommendations |
Our Commitment: koin138 never store your credit card numbers, debit card details, or bank account passwords. All financial transactions are processed through certified third-party secure payment gateways.
2
How We Use Your Information
The data we collect is used solely for legitimate purposes related to the services you use. Koin138 does not sell, rent, or transfer your personal data to third parties for marketing purposes without your consent.
Here are the primary purposes for which your data is used on the Koin138 platform:
- Account Management: Creating, verifying, and securely maintaining your member account, including the KYC process required by law.
- Transaction Processing: Processing deposits, withdrawals, and all financial activity in your account quickly and accurately.
- Platform Security: Detecting and preventing fraud, multi-account usage, money laundering, and other unlawful activities that could compromise the security of all members.
- Service Communications: Sending important account-related notifications, transaction confirmations, policy updates, and security information.
- Personalised Marketing (with consent): Sending promotional offers, bonuses, and the latest koin138 news to members who have given specific consent to receive marketing communications.
- Legal Compliance: Fulfilling legal and regulatory obligations including PDPA 2010, AML regulations, and other applicable reporting requirements.
- Analytics and Improvement: Understanding aggregate (not individual) platform usage patterns to improve user experience and platform performance.
3
Data Encryption & Security
Koin138 invests seriously in security infrastructure to ensure every member's personal data is protected to the highest standard. Our security approach is layered — meaning even if one layer fails, additional protective layers remain in place.
- 256-bit SSL Encryption: All data transmitted between your device and koin138 servers is encrypted using TLS 1.3 protocol with 256-bit encryption strength — the same standard used by Malaysia's major banking institutions.
- Stored Data Encryption: Sensitive data stored in Koin138's database is also encrypted using AES-256 algorithm, ensuring it remains unreadable even in the event of unauthorised access.
- Two-Factor Authentication (2FA): Every login from a new device requires OTP verification — an additional layer of protection that prevents unauthorised access even if your password is compromised.
- 24/7 Monitoring: The koin138 security system continuously monitors account activity. Any unusual activity will trigger automatic alerts and an immediate security review.
- Data Segregation: Financial data, identity data, and usage data are stored in separate systems with strict access controls, minimising the risk of widespread data exposure.
- Regular Security Audits: The koin138 platform regularly undergoes independent penetration testing and security audits to identify and remediate any potential vulnerabilities.
4
Data Sharing with Third Parties
Koin138 does not sell or disclose members' personal data to third parties for commercial gain. However, in the course of operating the platform, we share limited data with specific parties where necessary, all of whom have passed our security compliance review.
- Payment Gateway Providers: Required transaction information is shared with payment providers such as DuitNow, FPX, and authorised e-wallet operators solely to process your financial transactions.
- KYC Verification Providers: Identity information is shared with accredited KYC verification providers to meet legal identity verification requirements.
- Statutory Authority: koin138 will disclose required data to Malaysian statutory authorities or law enforcement bodies when mandated by law or a valid court order.
- Technical Infrastructure Providers: The cloud and hosting service providers we use are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
- Game Providers: Aggregated (non-personal) data about gaming patterns may be shared with game providers for product improvement purposes only.
Every third party that receives data from koin138 is required to sign a Data Processing Agreement (DPA) ensuring they comply with data protection standards equivalent to our own policy.
5
Cookies and Tracking Technologies
Koin138 uses cookies and similar technologies to enhance platform functionality and deliver a better user experience. Cookies are small text files stored on your device when you visit our website.
- Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential for platform operation.
- Performance Cookies: Helping us understand how members use the platform — the most visited pages, time spent, and any errors encountered. This information is used in aggregate to improve the platform.
- Functional Cookies: Saving your preferences such as language, time zone, and display settings to ensure a more personalised experience when you return to the platform.
- Marketing Cookies: Used to display relevant promotions to you based on your usage habits. You may choose to disable these cookies without affecting the platform's core functionality.
You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect some features of the Koin138 platform.
6
Your Rights as a Data Subject
As a koin138 member and data subject under PDPA 2010, you have the following rights regarding your personal data. koin138 is committed to making it easy for you to exercise these rights without unnecessary hassle.
Right of Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Correct any inaccurate or incomplete personal data in your account.
Right to Erasure
Request deletion of your personal data, subject to applicable legal obligations.
Right to Restriction
Restrict how we process your data under certain circumstances permitted by law.
Right to Portability
Receive your data in a structured, machine-readable format for transfer to another platform.
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
To exercise any of the above rights, submit your request to the koin138 privacy team via Live Chat or email at
[email protected]. We will process your request within
14 working days.
7
Data Retention Period
Koin138 does not retain your personal data longer than necessary for the stated purposes or as required by law. Our retention policy is as follows:
- Active Account Data: Retained for as long as your account is active and in use. This includes all identity data, contact information, and transaction history.
- Financial Transaction Data: Retained for a minimum of 7 years after the transaction date in accordance with Malaysia's financial and tax legal requirements.
- KYC Data: Identity verification documents are retained for a minimum of 5 years after account termination in accordance with AML compliance requirements.
- Security Logs: Login activity and security records are retained for 2 years for potential fraud investigation purposes.
- Terminated Account Data: Following account termination, data no longer required by law will be deleted or anonymised within 90 days.
8
Updates to This Privacy Policy
Koin138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. We are committed to notifying you of any significant changes.
- Material changes to this Privacy Policy will be communicated to members via their registered email or in-platform notification at least 14 days before taking effect.
- Continued use of the koin138 platform after the effective date of any update constitutes acceptance of the amended policy.
- The date of the most recent update is always displayed at the top of this page for your reference.
- Previous versions of the Privacy Policy can be requested from the koin138 support team for comparison if needed.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact our privacy team via Live Chat within the platform or by email at [email protected].
Why Your Data Is Safe with koin138
Data protection is not just a policy — it is how we operate every day at koin138.
256-bit SSL Encryption
The same level of encryption used by Malaysia's major banks protects all data transmitted through the koin138 platform.
PDPA 2010 Compliance
All data management practices at koin138 fully comply with Malaysia's Personal Data Protection Act 2010.
Independent Security Audit
The koin138 platform undergoes independent security testing on a regular basis to ensure no exploitable vulnerabilities exist.
No Data Selling
Koin138 never sells or rents your personal data to advertisers or third-party data brokers.
Full Control in Your Hands
Access, correct, or request deletion of your data at any time via your account settings or our support team.
24/7 Threat Monitoring
Our security system operates around the clock to detect and neutralise any threats to member data.
Your Data Is Protected. Join Koin138 with Confidence.
We have built a solid security foundation. Now it's your turn to enjoy a safe and responsible online entertainment experience with koin138.
PDPA 2010 Compliance · 256-bit SSL Encryption · 24/7 Privacy Support