HEMAT138 PRIVACY POLICY

Hemat138 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Users

At hemat138, your privacy is something we take seriously. This document clearly explains how we collect, use, store, and protect your personal data as a member of our betting platform in Malaysia.

Document Information
Effective Date 1 January 2026
Last Updated 1 May 2026
Language Bahasa Melayu (ms-MY)
Jurisdiction Malaysia – Personal Data Protection Act 2010
Security Standards 256-bit SSL Encryption
Privacy Email support@hemat138.top
🔒 hemat138 Privacy Policy – Your data is protected with 256-bit SSL encryption hemat138 does not sell your personal data to any third party 🛡️ Compliant with Malaysia's Personal Data Protection Act 2010 – hemat138 Deposit via Touch 'n Go & DuitNow – Secure and Instant at hemat138 ⚽ Malaysia Super League, EPL & E-Sports – All the Best Odds at hemat138 24/7 Bahasa Malaysia Customer Support – hemat138 🔐 Two-Factor Authentication (2FA) is available for all hemat138 accounts 150% Welcome Bonus – Register for Free at hemat138 Today 🔒 hemat138 Privacy Policy – Your data is protected with 256-bit SSL encryption hemat138 does not sell your personal data to any third party 🛡️ Compliant with Malaysia's Personal Data Protection Act 2010 – hemat138 Deposit via Touch 'n Go & DuitNow – Secure and Instant at hemat138 ⚽ Malaysia Super League, EPL & E-Sports – All the Best Odds at hemat138 24/7 Bahasa Malaysia Customer Support – hemat138 🔐 Two-Factor Authentication (2FA) is available for all hemat138 accounts 150% Welcome Bonus – Register for Free at hemat138 Today
0 Member Data Protected
0 SSL Encryption
0 Data Not Sold
0 Security Monitoring

How hemat138 Protects Your Privacy

Six core data protection commitments we uphold for every member in Malaysia

01
ENCRYPTION

256-bit SSL Encryption at All Times

All data transmitted between your device and hemat138's servers is encrypted using 256-bit SSL protocol — the same security standard used by Malaysia's leading banking institutions such as Maybank and CIMB. This means your account information, payment details via Touch 'n Go, GrabPay, or DuitNow, and all your betting activity cannot be intercepted by any third party.

02
NO DATA SALES

Your Data Is Never Sold or Transferred

Hemat138 has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we are simply its responsible custodian. This is not merely a promise; it is a commitment enshrined in this Privacy Policy and enforced internally at every level of the hemat138 organisation.

03
LEGAL COMPLIANCE

PDPA 2010 Malaysia Compliant

Hemat138's Privacy Policy is designed and enforced in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This provides you with clear legal rights over your data — including the right to access, correct, and request deletion of the personal data we hold. hemat138 takes its data protection compliance obligations seriously.

04
USER CONTROLS

You Control Your Data

Hemat138 gives you full control over your personal data. Through your account settings, you can manage communication preferences, update your personal information, or submit requests to access or delete your data. All data requests are handled transparently and resolved within the timeframes set by applicable Malaysian law.

05
24/7 MONITORING

Continuous Security Monitoring

Hemat138's cybersecurity team monitors our platform and data infrastructure around the clock – 24 hours a day, seven days a week. Any suspicious activity, such as unauthorised access attempts or anomalies in transaction patterns, is detected and addressed promptly. You will be notified via email or in-app notification should any activity require your attention.

06
DATA MINIMISATION

Only Necessary Data Collected

Hemat138 follows a data minimisation principle – we only collect information that is strictly necessary to provide our services to you. We do not gather data in excess just to store it. Every category of data we collect has a clear purpose and a defined retention period, in line with legal and operational requirements.

Hemat138 Full Privacy Policy

This Privacy Policy ("Policy") describes the personal data collection, use, storage, and protection practices implemented by hemat138 ("we", "platform") for users who access and use our services in Malaysia. This Policy should be read together with Terms & Conditions hemat138.

By registering an account or using any hemat138 service, you consent to the collection and use of your personal data as described in this Policy. If you do not agree, please stop using the platform immediately and contact us to close your account.

Defining "Personal Data" in the Context of hemat138

Personal data refers to any information that can identify you, directly or indirectly, as an individual — including your name, phone number, email address, financial information, betting records, and platform usage patterns. hemat138 handles all such data categories with an appropriate level of protection.

1

Introduction & Scope of Privacy Policy

Hemat138 is an online betting platform operating in Malaysia and is subject to the Personal Data Protection Act 2010 (PDPA). This Privacy Policy applies to all users who:

  • Registering for or holding an active account with hemat138;
  • Accessing or browsing the hemat138 website without registering;
  • To interact with any hemat138 content, promotions, or communications;
  • Contacting the hemat138 customer support team through any available channel.

This Policy does not apply to third-party websites or services that may be linked from hemat138. We are not responsible for the privacy practices of any such third parties.

2

Personal Data Collected by hemat138

Hemat138 collects the following categories of data in the course of providing our services:

Data Category Sample Information Collection Methods
Identity Data Full name, IC number, date of birth Registration form
Contact Data Malaysian phone number, email address Registration form, account updates
Financial Data E-wallet account details, MYR transaction records Deposit/withdrawal process
Betting Data Betting history, selected markets, winnings Platform activity
Technical Data IP address, device type, web browser Automated system logs
Usage Data Pages visited, session duration, features used Cookies & Analytics

Hemat138 no collect credit or debit card information directly — all payments are processed through trusted e-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, each of which maintains its own payment security standards.

3

Purpose of Data Collection and Use

Hemat138 uses the personal data collected solely for the following purposes:

  • Account management: Creating, verifying, and managing your hemat138 user account;
  • Service provision: Enables you to use all platform features, including Sports Betting (Super League football, EPL, badminton, e-sports), Live Casino, slots, and more;
  • Payment processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via supported local payment methods;
  • Identity verification: To fulfil Know Your Customer (KYC) requirements and ensure the platform is only accessed by users aged 18 and above;
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse;
  • Customer support: Handling enquiries, complaints, and technical support requests you submit;
  • Service communications: Sending you important information regarding your account, changes to our terms, promotions you are eligible for, and security notices;
  • Platform improvements: To analyse aggregated, anonymised usage data in order to improve the user experience on hemat138;
  • Legal compliance: To fulfil our obligations under applicable Malaysian law.

Hemat138 will not use your data for any purpose beyond those stated above without first obtaining your additional consent.

4

Legal Basis for Data Processing

Hemat138 processes your personal data on valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010:

  • Consent: You have given explicit consent through your acceptance of this Privacy Policy during registration;
  • Contractual necessity: Processing is necessary to fulfil the service agreement between you and hemat138;
  • Legitimate interests: hemat138 has a legitimate interest in processing data for security, fraud prevention, and service improvement purposes;
  • Legal obligation: Certain processing is required to comply with applicable Malaysian law.
5

Data Sharing & Disclosure to Third Parties

Hemat138 does not sell, rent, or trade members' personal data to any third party. Data disclosure only occurs in the following strictly limited and controlled circumstances:

  • Service providers: Companies that assist us in operating the platform, such as cloud infrastructure providers, payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), and gaming software providers. All such vendors are bound by strict data protection agreements and may only use your data for the specific service purposes defined;
  • Legal requirements: When required by Malaysian law, a court order, or a directive from a competent authority;
  • Crime prevention: When disclosure is required to prevent or investigate fraud, money laundering, or cybercrime involving our platform;
  • Your consent: Where you have given explicit consent for data sharing with specific parties.

In all cases where data is disclosed to third parties, hemat138 ensures a level of protection equivalent to the standards we apply to data we hold ourselves.

6

Data Storage & Security

Hemat138 stores your personal data on secure servers with multiple layers of security measures:

  • Data encryption in transit using 256-bit SSL/TLS protocols;
  • Encryption of data at rest for sensitive information such as passwords and financial details;
  • Role-based access controls — only authorised personnel may access members' personal data;
  • Continuous security monitoring and periodic penetration testing;
  • Secure data backups and tested disaster recovery procedures.

Data Retention Period: hemat138 retains your personal data for as long as your account remains active or as long as necessary to provide our services. Following account closure, certain data may be retained for the period required under applicable Malaysian law — typically between 7 and 10 years for financial records. Once the mandatory retention period ends, data will be securely deleted or anonymised.

While we take every reasonable measure to protect your data, no security system can guarantee absolute 100% protection. We encourage you to take your own precautions as well, such as using a strong password and enabling Two-Factor Authentication (2FA) on your hemat138 account.

7

Cookies & Tracking Technologies

Hemat138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality;
  • Preference Cookies: Saving your preferences such as display language and odds settings for a more convenient experience on return visits;
  • Analytics Cookies: To help us understand how users interact with the platform through aggregated, anonymised data. This information is used solely for platform improvement;
  • Security Cookies: Detecting suspicious access patterns and protecting your account from unauthorised access.

You can manage your cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the hemat138 platform. For more information, contact our support team.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by hemat138:

  • Right of Access: To request a copy of the personal data hemat138 holds about you;
  • Right to Rectification: Request correction of inaccurate or incomplete data;
  • Right to Erasure: Request the deletion of your personal data under certain circumstances permitted by law;
  • Right to Object: To object to the processing of your data for direct marketing purposes;
  • Right to Withdraw Consent: To withdraw your consent to data processing at any time, though this may affect our ability to provide certain services.

To submit any request relating to the rights above, please contact the hemat138 Privacy Officer by email at support@hemat138.top. We will process your request within 21 days of receipt, in accordance with Malaysian PDPA requirements.

Related Documents

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming hemat138 for a full understanding of your rights and responsibilities as a member of our platform.

9

Children's Data

The hemat138 platform is strictly for users aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. All registration processes include age verification, and we enforce this policy rigorously.

Should hemat138 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the relevant account will be closed. If you believe a child or minor has registered on our platform, please contact us at support@hemat138.top without delay.

10

Privacy Policy Amendments

Hemat138 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, current legal requirements, or platform improvements. All members will be notified of any material changes through:

  • In-platform notifications displayed upon your next login;
  • Email to the registered address on your account;
  • Update the "Last Updated" date at the top of this page.

Your continued use of the hemat138 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically.

11

Contact Our Privacy Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data at hemat138, please contact our Privacy Officer through the following channels:

  • Privacy Email: support@hemat138.top (please state "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24 hours a day, 7 days a week on the hemat138 platform
  • Response Time: Under 2 minutes (live chat) or under 24 hours (email)

We are committed to handling every privacy-related enquiry with care, thoroughness, and within the timeframes required under Malaysia's data protection laws. Your satisfaction and confidence in how hemat138 manages your data is our priority.

Your Rights as a hemat138 Member

Under PDPA 2010, you have strong rights over your personal data

Right to Data Access

Request a copy of all personal data hemat138 holds about you. Requests will be processed within 21 days.

Right to Rectification

If any of your personal data held by hemat138 is inaccurate or out of date, you have the right to request an immediate correction.

Right to Erasure

In certain circumstances permitted by law, you may request that hemat138 delete your personal data.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without providing a reason.

Withdraw Consent

You may withdraw consent for data processing at any time. Please note this may affect the services we are able to provide.

Right to Lodge a Complaint

If you are dissatisfied with hemat138's response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

FAQ – hemat138 Privacy Policy

No, hemat138 does not share, sell, or rent members' personal data to any advertising, marketing, or third-party companies for commercial purposes. Any marketing communications you receive from hemat138 are based solely on the data we hold about your preferences, and you may opt out at any time through your account settings or by contacting our support team. This commitment is central to the trust you place in hemat138, and we will never betray it.

All financial transactions on hemat138 — whether deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, or withdrawals of your winnings in MYR (RM) — are processed through fully encrypted payment channels using 256-bit SSL protocol. hemat138 does not store your complete e-wallet or banking account details on our servers; that information is held solely by the respective payment providers, who maintain their own PCI-DSS security standards. The transaction records we retain are strictly for audit, customer support, and legal compliance purposes, and are protected by stringent access controls.

When you close your hemat138 account, how your data is handled depends on the type of data involved. Data that is no longer needed to provide our services will be deleted or anonymised within 90 days of account closure. However, financial and transaction records may need to be retained for a longer period — typically 7 years — in line with Malaysian accounting and tax legislation. Data related to any active fraud investigations may also be retained until those investigations are concluded. In all cases, data kept after account closure will not be used for marketing purposes or any other active activity.

If you suspect suspicious activity on your hemat138 account – such as logins from an unrecognised location or device, transactions you did not make, or changes to your account details that you did not initiate – take the following steps immediately: First, contact the hemat138 support team via live chat or email at support@hemat138.top to report the incident. We will freeze your account immediately as a protective measure. Second, reset your password using the "Forgot Password" feature via your registered email or phone number. Third, review all recent transactions and report any unauthorised activity to us. The hemat138 security team will investigate the incident and take appropriate action, including reporting to the relevant authorities if necessary.
PDPA 2010 Compliant
256-bit SSL
No Data Sales
24×7 Support
DuitNow & FPX
15-Minute Withdrawal

Join hemat138 – A Platform That Respects Your Privacy

Over 500,000 Malaysian members have trusted hemat138 with their data. A secure, transparent platform fully compliant with Malaysian data protection law.

SSL 256-bit Protected Data PDPA 2010 Compliant Minimum Deposit RM 10 15-Minute Withdrawal 24/7 Bahasa Malaysia Support
Bahasa Melayu