Your privacy matters to us. This policy explains precisely what personal information PG138 collects, how we use and protect it, who we share it with, and what rights you hold over your own data as a registered player.
PG138 ("we", "us", "our", "the Platform") is an online gaming and sports betting platform accessible at https://pg138.click, serving registered players across Malaysia including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform.
This Privacy Policy ("Policy") sets out in clear, formal terms how PG138 collects, uses, stores, shares, and protects your personal information. It applies to all personal data processed in connection with your use of the PG138 website, any associated mobile web interface, customer support channels, and related communications.
By registering an account on PG138 or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without prejudice to the lawfulness of processing that occurred prior to withdrawal.
Quick Summary: PG138 collects only the data it genuinely needs to operate your account, process transactions, verify your identity, and comply with its regulatory obligations. We do not sell your personal data. We do not share it with advertisers. We apply bank-grade security to protect everything we hold.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, or deletion. |
| "Controller" | PG138, as the entity that determines the purposes and means of processing personal data. |
| "Data Subject" | You — the individual whose personal data is being processed. |
| "Third Party" | Any person or entity other than you and PG138, including payment processors, KYC verification providers, and technology suppliers. |
| "KYC" | Know Your Customer — the identity verification process required for full account access and withdrawal processing. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, analytics, and session management. |
PG138 collects personal data in the following categories. We collect only the minimum data necessary for each specified purpose.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Malaysian MyKad number, Passport number | KYC verification, age verification, account registration |
| Contact Data | Malaysian mobile phone number, email address | Account login, 2FA, support communications, transaction alerts |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e-wallet IDs, bank account last digits), transaction amounts in MYR or cryptocurrency | Payment processing, fraud detection, AML compliance |
| KYC Document Data | Scanned or photographed copies of Malaysian MyKad, Driver's License, Passport, proof-of-address documents, selfie images | Identity verification, regulatory compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, login history | Security monitoring, fraud prevention, Platform optimization |
| Usage Data | Games played, bet amounts, session durations, bonus usage, deposit and withdrawal patterns | Responsible gambling monitoring, account management, regulatory reporting |
| Communications Data | Support chat transcripts, email correspondence, live chat logs | Quality assurance, dispute resolution, compliance auditing |
Sensitive Data: KYC document data, including identity card scans and selfie images, is classified as sensitive personal data. This data is encrypted at rest and in transit, accessed only by authorized verification personnel, and retained strictly in accordance with our retention policy and applicable regulatory requirements.
PG138 collects personal data through the following means:
Information you provide directly to PG138 when you:
Information collected automatically when you access or use the Platform:
In certain circumstances, PG138 may receive or verify personal data from third-party sources, including:
PG138 processes personal data only where a valid legal basis exists. The applicable bases are as follows:
PG138 uses personal data collected from registered players for the following specific purposes:
PG138 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the following limited and necessary circumstances:
PG138 engages trusted third-party service providers who assist in delivering the Platform's core functions. These include payment processing partners (including local Malaysian e-wallet and FPX operators), KYC and identity verification service providers, fraud prevention and AML screening providers, cloud infrastructure and hosting suppliers, and customer support platform operators. All service providers are contractually required to process your data only on our instructions and to maintain appropriate security standards.
PG138 may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be limited to the minimum information necessary to satisfy the legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of PG138's business assets, personal data held by PG138 may be transferred to the acquiring entity. You will be notified of any such change and your rights under this Policy will continue to be protected.
We do not share your data with advertisers, marketing networks, data brokers, or social media platforms. Data shared with service providers is strictly for the purpose of delivering services to you through PG138.
PG138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as general guidance:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years following closure | AML regulations, regulatory licensing obligations |
| KYC Documents | Duration of account plus 5 years following closure | Regulatory requirement for identity record-keeping |
| Transaction Records | 7 years from transaction date | Financial regulatory compliance, tax obligations |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Log Data | 12 months | Security monitoring, fraud investigation |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years | Consent management compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its re-identification.
PG138 uses cookies and similar technologies on the Platform to enable core functionality, improve the user experience, and support security operations. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential Cookies | Required for the Platform to function. Manages user sessions, authentication tokens, and security checks. Cannot be disabled without disrupting Platform functionality. | No — strictly necessary |
| Analytics Cookies | Collects anonymised usage data about how players navigate the Platform. Used to identify usability issues and improve site performance. No personally identifiable information is stored in analytics cookies. | Yes — consent-based |
| Functional Cookies | Remembers your Platform preferences such as language settings and display options to provide a more personalised experience on return visits. | Yes — consent-based |
You may configure your browser settings to refuse or delete cookies at any time. Disabling essential cookies will affect the Platform's core functionality. For analytics and functional cookies, you may withdraw consent by adjusting your browser preferences or by contacting our support team.
PG138 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include:
Your Responsibility: While PG138 maintains robust security measures, the security of your account also depends on the strength and confidentiality of your login credentials. Use a strong, unique password and do not share your account details with any other person. Contact support immediately if you suspect unauthorized account access.
PG138 operates primarily to serve players in Malaysia. However, as a platform that uses international technology infrastructure and third-party service providers, some of your personal data may be transferred to, stored, or processed in countries or territories outside Malaysia.
Where such international transfers occur, PG138 takes appropriate steps to ensure that your personal data receives a level of protection consistent with the standards described in this Policy. Measures employed include contractual data processing agreements with third-party service providers that impose data protection obligations equivalent to those applied by PG138 directly.
By using the PG138 Platform, you acknowledge and consent to the transfer of your personal data to the countries described above, subject to the protections set out in this Policy.
Subject to applicable law, you have the following rights in relation to your personal data held by PG138. To exercise any of these rights, please contact us through the channels set out in Section 15.
You have the right to request a copy of the personal data PG138 holds about you, together with information about how and why it is processed.
You have the right to request correction of any inaccurate or incomplete personal data held about you. Account details may be updated directly within your account settings for basic information.
In certain circumstances, you have the right to request the deletion of your personal data. Note that this right may be limited where we are required to retain data for legal or regulatory compliance purposes.
You have the right to request that PG138 restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to its use.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
You have the right to object to processing based on legitimate interests at any time. Where processing is based on consent, you may withdraw that consent at any time via your account settings or by contacting support.
Response Timelines: PG138 will respond to all verified rights requests within 30 days of receipt. Complex requests may require an extension of up to a further 60 days, in which case we will notify you within the initial 30-day period.
PG138 is strictly an adult entertainment platform. The minimum age requirement for account registration and use of the Platform is 21 years of age. This requirement is enforced through our KYC identity verification process.
PG138 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21 years of age, that data will be deleted promptly and the associated account will be closed immediately.
If you are a parent or guardian and believe that a minor has submitted personal data to PG138, please contact us immediately using the contact details in Section 15 of this Policy.
Age Verification is Mandatory: All accounts must complete KYC identity verification confirming a minimum age of 21 years before full account privileges — including withdrawals — are activated. Accounts where this cannot be confirmed will be suspended pending verification.
PG138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, PG138 will provide notice by updating the "Last Updated" date at the top of this page and, where the changes are significant, by notifying registered players via their registered contact information.
Your continued use of the PG138 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed of how your personal data is being handled.
Previous versions of this Privacy Policy may be made available upon written request to our support team.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact PG138 through the following channels:
Privacy & Data Enquiries Email: [email protected] — please include "Privacy Request" in your subject line.
Live Chat Support: Available 24 hours a day, 7 days a week via the chat icon on the Platform. Suitable for general privacy questions.
Formal Complaints: If you are not satisfied with our response to a privacy concern, you may escalate to the relevant data protection authority in your jurisdiction.
To process a data rights request efficiently, please provide your registered username, registered phone number or email address, and a brief description of your request. We may need to verify your identity before actioning any request that involves access to or deletion of personal data.
Six concrete measures that back up everything stated in this Privacy Policy.
Every byte of data exchanged between your device and PG138 is encrypted using bank-grade TLS technology. KYC documents and financial records are encrypted at rest on our servers.
PG138 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data is never shared with advertisers or data brokers.
Access to personal data within PG138's systems is restricted to authorised personnel only, enforced by role-based permissions. All access is logged and auditable.
PG138 retains personal data only for as long as required by law or by genuine operational necessity. Data is securely deleted or anonymised when retention periods expire.
PG138 processes all data rights requests — access, rectification, erasure, objection — within 30 days. We provide clear procedures and a direct support channel for privacy enquiries.
Automated intrusion detection and real-time threat monitoring systems run continuously. Any detected anomaly triggers immediate investigation and, where necessary, protective action on affected accounts.
Our support team is available 24/7 to address any privacy concerns or data rights requests. You can also review our full Terms and Conditions or visit the homepage to explore PG138.
21+ Only PG138 is for entertainment purposes only. For players aged 21 and above only. Please gamble responsibly.