hemat138 Official Policy

Privacy Policy hemat138 – Your Personal Data Protection

Hemat138 takes every aspect of our members' personal data protection seriously. This Privacy Policy clearly explains how we collect, use, store and protect your information — in line with the data protection laws in force in Malaysia.

Updated: 1 January 2026
256-bit SSL Encryption Secure Data No Data Selling User Rights
Commitment Privacy We

Six core principles that underpin how hemat138 handles your personal data

High-Level Encryption

All data transmitted between your device and hemat138's servers is protected with 256-bit SSL encryption — the same security technology used by leading banking institutions.

Minimum Data Collection

Hemat138 only collects data that is genuinely necessary for platform operations and regulatory compliance. No excess data is collected without a sound and disclosed reason.

No Third-Party Data Sales

Your personal data is never sold, rented, or shared with external marketing parties without your explicit consent. Your privacy is not a commodity to us.

Control Is in Your Hands

You have full rights to access, correct, download, or request deletion of your personal data at any time through the hemat138 account panel.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, strict access controls, and 24/7 security monitoring. Internal access to member data is restricted and regularly audited.

Data Breach Notification

If any security incident occurs that affects your data, hemat138 is committed to notifying you within 72 hours in accordance with our established incident response procedures.

Important Note: This Privacy Policy forms part of the hemat138 Terms and Conditions. By using our platform, you agree to how we handle your personal data as described here.
1Introduction

Hemat138 is a trusted online betting and casino platform used by hundreds of thousands of players in Malaysia. We understand that your trust in us depends not only on the quality of the games we offer, but also on how we handle your personal information with full integrity and responsibility.

This Privacy Policy provides a detailed explanation of our data collection and usage practices. It covers all your interactions with hemat138 — whether through our website, mobile app, or customer support channels. This document is written in clear, plain language so you truly understand what happens with your data.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. Any enquiries regarding this policy may be directed to our privacy team at any time.

2Data We Collect

Hemat138 collects your personal information through several channels — during account registration, daily platform use, the identity verification (KYC) process and interactions with our support team. The following are the categories of data we collect:

Data Categories Example Information Primary Purpose
Identity Data Full name, date of birth, identity card number Identity verification (KYC), AML compliance
Contact Data Email address, mobile phone number Account communications, 2FA security
Financial Data Bank account number, bank name, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Account security, fraud detection
Usage Data Wagering history, games accessed, session duration Platform enhancement, responsible gaming compliance
Communication Data Live chat records, support emails, complaint tickets Complaint resolution, service enhancement
hemat138 does not collect sensitive data such as medical information, political views or religious beliefs. All data collected is directly relevant to platform operations and regulatory compliance.
3How We Use Your Data

The personal data we collect is used solely for legitimate, clearly stated purposes. We do not use your data for any purpose you have not consented to. Below is a detailed breakdown of how your data is used:

  • Account Management: Creating, verifying, and managing your member account, including the secure login process and password recovery.
  • Transaction Processing: Processing deposits and withdrawals securely through supported payment methods such as DuitNow, FPX, Touch 'n Go eWallet, and Boost.
  • KYC & AML Compliance: Verifying your identity and ensuring compliance with anti-money laundering (AML) laws and other applicable regulatory obligations.
  • Platform Security: Detecting and preventing fraud, account abuse, bot activity, and any security threats that may affect you or our platform.
  • Customer Support: Resolving your queries, complaints, and technical issues more efficiently based on records of previous interactions.
  • Responsible Gaming: Monitoring usage patterns to identify early signs of problem wagering and presenting appropriate self-control measures.
  • Service Improvement: Analysing aggregate and anonymised usage data to improve user experience, platform performance, and game offerings.
  • Marketing Communications: Sending promotional offers, bonuses, and platform news — only to members who have given explicit consent to receive marketing communications.

Any use of data beyond the purposes stated above will require fresh consent from you. hemat138 will not make automated decisions that significantly affect you based solely on automated data processing without human intervention.

4Data Sharing with Third Parties

Hemat138 does not sell, rent or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where data sharing is necessary for the proper operation of the platform:

  • Payment Service Providers: Required transaction information is shared with trusted payment processors (such as FPX providers and the DuitNow gateway) solely to complete your deposits and withdrawals.
  • Identity Verification Providers: KYC documents may be shared with third-party identity verification services that have passed our rigorous security assessment, for the purpose of verifying the authenticity of your documents.
  • Game Providers: Limited information (such as member ID) is shared with licensed game providers to allow you to access their games within the hemat138 platform.
  • Legal Authority: Data will be disclosed to the relevant authorities when required by law, court order, or a valid official investigation.
  • Technical Infrastructure Providers: Cloud computing and hosting services used by hemat138 are subject to strict data processing agreements to protect your information.

All third parties that receive your data are required to comply with privacy policies equivalent to or stricter than our own. Binding written agreements are enforced to ensure ongoing protection.

5Data Security

Protecting your personal data from unauthorised access, loss, or misuse is hemat138's top priority. We apply a multi-layered security approach covering both technical and organisational aspects:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
  • Data-at-rest encryption using AES-256 for all sensitive data stored in our databases.
  • Role-based access control (RBAC) — only staff who require access to specific data to perform their duties are permitted.
  • 24/7 security monitoring and intrusion detection.
  • Penetration testing and periodic security audits conducted by independent parties.
  • Two-factor authentication (2FA) is mandatory for all staff access to internal systems.
  • Regular data backup procedures with periodic disaster recovery testing.
While no system can guarantee absolute security, hemat138 continually strives to maintain the highest level of protection and updates our security measures in line with the latest threats.
6Cookies & Tracking Technologies

Hemat138 uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used and ensure the security of your login sessions. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve the user experience.
  • Preference Cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reset them every time you log in.
  • Analytics Cookies: Helping us understand aggregate usage trends to plan platform improvements. Analytics data is processed anonymously.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform.

7Your Rights as a Data Subject

As a hemat138 member, you hold the following rights regarding your personal data. We fully respect these rights and are committed to facilitating their exercise:

Right of Access

You have the right to obtain a copy of your personal data held by us at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete data.

Right to Erasure

You have the right to request deletion of your personal data, subject to applicable legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances permitted by law.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

To exercise any of the above rights, contact our privacy team via live chat or our support email. We will process your request within 30 business days.

8Data Retention & Deletion Period

Hemat138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. The following are our data retention period guidelines:

  • Active Account Data: Retained for the entire duration your account is active on the hemat138 platform and accessible by you at any time.
  • KYC & AML Data: Retained for a minimum of 7 years after account closure in line with Malaysia's anti-money laundering legal compliance requirements.
  • Transaction Records: Retained for 7 years to meet applicable financial audit and tax reporting requirements.
  • Support Communication Data: Live chat conversation records and support emails are retained for 3 years to allow us to reference interaction history for complaint resolution purposes.
  • Technical & Log Data: Access logs and technical data are retained for 12 months for security and incident investigation purposes.
  • Inactive Accounts: Account data inactive for more than 5 years will be anonymised or deleted, subject to applicable legal retention obligations.

Once the retention period expires, your data will be securely deleted or anonymised using deletion procedures that ensure the data cannot be recovered.

9Child Protection

Hemat138 is a betting platform strictly restricted to individuals aged 18 and above only. We do not intentionally collect or process personal data from individuals under the age of 18.

All prospective members are required to verify their age during registration and through the KYC identity verification process. Should we find that a minor's personal data has been collected unintentionally, we will delete that data immediately and close the account in question.

Parents & Guardians: If you discover that a minor under your care has registered on this platform, please contact our support team immediately for prompt action.
10Changes to Privacy Policy

Hemat138 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological advancements. Any significant changes will be communicated to you via:

  • In-platform notifications (banners or pop-ups upon login) for changes that affect how we use your data.
  • Notification email to your registered email address for significant policy changes.
  • Update the "Last Updated" date at the top of this page.

Continued use of the hemat138 platform after policy changes take effect constitutes your acceptance of the updated version. If you disagree with any changes, you have the right to close your account and request deletion of your data.

11Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the hemat138 privacy team is ready to assist you.

You can reach us via:

  • Live Chat 24/7: The fastest way — use the live chat icon at the bottom right corner of our platform at any time.
  • Support Email: [email protected] — we aim to respond within 48 business hours.
  • Via Account: Log in to your account and navigate to Settings > Privacy & Data for easier processing of data-related requests.
For personal data rights requests (access, correction, deletion, etc.), please include your full name, account number and a clear description of your request. This helps us process your request more quickly and accurately.
Join Malaysia's Trusted Platform
Privacy Guaranteed. Play with Peace of Mind.

Register your hemat138 account today and enjoy a safe, transparent, and exciting wagering experience. Your personal data is always protected to the highest security standards. Over 500,000 Malaysian players have trusted us.

SSL 256-bit Protected Data Secure KYC 24/7 Support
Bahasa Melayu