Official Data Protection

Nos138 Privacy Policy — How We Protect the Personal Information of Malaysian Members

Nos138 takes the privacy of every member seriously. This document transparently explains how we collect, use, store, and protect your personal data — in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Effective: 1 January 2026
Updated: 1 July 2026
Jurisdiction: Malaysia (PDPA 2010)
nos138's Commitment
Your data is protected with 256-bit SSL encryption and is never sold to third parties.
256
bit SSL
PDPA
2010
24/7
Monitoring

Nos138 Data Protection Principles

Six core principles governing how we handle your personal information

Strict Confidentiality

Nos138 members' personal information is never disclosed, sold, or shared with any third party for marketing purposes without your explicit consent. Your privacy is our top priority.

256-bit SSL Encryption

All data transmitted between your device and nos138 servers is protected by 256-bit SSL encryption technology. This includes your login credentials, payment information, and game records.

Full Right of Control

You have the right to access, correct, delete, or transfer your personal data at any time. Contact nos138 and we will process your request within 14 business days.

Minimum Data Collection

Nos138 only collects data that is strictly necessary to operate your account, process transactions, and comply with legal requirements. No excess data is collected.

Limited Retention

Your personal data is retained only for as long as necessary for the stated purposes or as required by Malaysian law. Once that period has lapsed, data is securely deleted or anonymised.

Anti-Leak Monitoring

Nos138 operates a 24/7 security monitoring system to detect and prevent any unauthorised access attempts or data breaches. Our IT team is on standby to respond in real time.

1

Introduction

This Privacy Policy outlines nos138's commitment to protecting the personal data of all members who use the nos138 online betting and casino platform accessible at nos138.biz.

Nos138 operates in Malaysia and is fully compliant with the Personal Data Protection Act (PDPA) 2010. This Policy applies to all personal information you provide to nos138 during the registration process, use of the platform, or any communication with our team.

By registering a nos138 account, you consent to nos138 collecting and processing your personal data as described in this Privacy Policy. This consent may be withdrawn at any time — however, doing so may affect your ability to fully use nos138's services.

nos138 Transparency
nos138 believes in complete transparency. If at any point you do not understand any part of this Privacy Policy, please reach out to us at support@nos138.biz and we will provide clear explanations in Bahasa Melayu.
2

Personal Information Collected

Nos138 collects various types of personal information depending on how you interact with our platform. The following are the main categories of data collected:

2.1 Registration Information
Full name as shown on Malaysian MyKad or Passport
Active email address
Malaysian mobile phone number
Date of birth (for age verification)
Username and password (passwords are stored in encrypted hash form)
2.2 Identity Verification Information (KYC)
Malaysian MyKad identification number
Photo of identity card (front and back)
Selfie photo for facial verification
Proof of address (Malaysian bank statement or utility bill)
2.3 Financial Information
Deposit records via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or FPX
Withdrawal winnings record
Malaysian bank account number for withdrawals (Maybank, CIMB, etc.)
2.4 Platform Usage Data
Game records — game type, bet amount, outcome
Login and logout — time, date, IP address
Device information — device type, operating system, browser
Approximate location data based on IP address
Data CategorySample InformationCollected When
IdentityFull name, MyKad number, date of birthRegistration / KYC
RelationshipEmail address, Malaysian phone numberRegistration
FinancialTNG, DuitNow, FPX RecordsDeposit / Withdrawal
TechnicalIP address, device type, browserEvery Login
GamesBetting records, winningsDuring Gameplay
3

Purpose of Personal Data Use

Nos138 uses your personal data solely for the following purposes:

Account Management
Securely create, maintain, and manage your nos138 account
Transaction Processing
Processing deposits and withdrawals via Malaysian payment methods
Identity Verification (KYC)
Ensuring all members meet the required age and location criteria
Customer Support
Providing support and resolving member complaints in Bahasa Melayu
Fraud Prevention
Detecting and preventing fraud, money laundering, and account abuse
Platform Improvement
Analysing usage patterns to enhance the experience for Malaysian players
nos138 Does Not Use Your Data For
Selling to advertisers or third-party companies
Sharing with group companies for cross-marketing purposes without consent
Automated profiling that makes legal or similarly significant decisions about you
4

Sharing Information with Third Parties

Nos138 takes a strictly limited approach to sharing your personal data. In general, nos138 does not share your personal information with any third parties, except in the following circumstances:

Malaysian Payment Providers — Transaction information required to process deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, and FPX is shared securely and on a limited basis with the respective providers
Game Software Providers — Game data required by nos138's live casino and slots providers to operate games properly
Malaysian Authorities — When required by law, court order, or a valid request from a Malaysian law enforcement authority
Identity Verification Services — To carry out KYC processes ensuring PDPA compliance and fraud prevention

In all of the sharing scenarios above, nos138 ensures that the relevant third parties have adequate data protection safeguards in place and use the information solely for the stated purposes.

5

Nos138 Data Security Measures

Protecting members' personal data is nos138's foremost priority. We implement multiple layers of technical and organisational security:

Technical Security
256-bit SSL encryption for all communications
Passwords are stored as bcrypt hashes
Firewall and intrusion detection systems
Two-factor authentication (2FA) available
Organisational Security
Data access is restricted on a "need-to-know" basis
Data security training for all staff
Regular security audits by independent parties
Clear data incident response procedures

While nos138 implements all reasonable security measures, no system is entirely free from risk. In the event of a data breach affecting your personal information, nos138 will notify you and the relevant authorities within the timeframe required by Malaysian law.

6

Cookies & Tracking Technologies

Nos138 uses cookies and similar tracking technologies to enhance your experience on our platform. The following types of cookies are used:

Cookie TypesPurposeDuration
Essential CookiesEnables core platform functions such as login and secure sessionsCurrent session
Performance CookiesAnalysing usage patterns to improve speed and usability30 days
Preference CookiesSaves your language preference and display settings1 year
Analytics CookiesCollecting anonymous usage statistics90 days

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may significantly affect the functionality of the nos138 platform.

7

Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you as a data subject have the following rights regarding your personal data held by nos138:

Right of Access
Request a copy of all personal data nos138 holds about you
Right to Rectification
Correct any personal data that is inaccurate or incomplete
Right to Erasure
Request deletion of your personal data (subject to legal obligations)
Right to Object
Withdraw consent for data processing for marketing purposes
Right to Data Portability
Receive your data in a machine-readable format for portability
Right to Object
Object to the processing of your data for specific purposes

To exercise any of the above rights, submit a written request to support@nos138.biz by stating the right you wish to exercise along with the relevant details. nos138 will process your request within 14 business days.

8

Data Retention Period

Nos138 retains your personal data only for as long as necessary to fulfil the stated purposes or as required under Malaysian law:

Data TypeRetention PeriodReason
Active Account DataFor the duration of active accountOngoing account management
Financial Records7 years after transactionMalaysian legal requirements
KYC Records5 years after account closureAnti-money laundering (AML)
Game Logs3 yearsDispute resolution
Communication Logs2 yearsCustomer support records
Marketing DataUntil consent is withdrawnConsent-based
9

International Data Transfers

In certain operational circumstances, your personal data may be processed outside Malaysia — for example, by technology providers or nos138's Live Casino service providers operating internationally. In all such cases, nos138 ensures that adequate protections are in place through:

Binding data processing agreements with third-party providers
Ensuring the recipient country has comparable data protection laws in place
Data encryption during transmission across jurisdictions
Financial transaction data stored on Malaysian servers
10

Child Protection

Nos138 is a platform exclusively for adults aged 18 and above. nos138 does not knowingly target or collect personal data from individuals under the age of 18.

Strict Prohibition for Minors
Should nos138 discover that personal data belonging to a minor has been collected inadvertently, nos138 will delete such data immediately and close the account in question. If you believe that a child's data has been submitted to nos138, please contact us at support@nos138.biz without delay.
11

Changes to This Privacy Policy

Nos138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or nos138 platform operations.

You will be notified of any material changes to this Privacy Policy via your registered email or an in-platform notification on nos138 at least 14 days before the changes take effect. Your continued use of the nos138 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

Stay Informed
The "Last Updated" date at the top of this page always reflects the current version of the nos138 Privacy Policy. We encourage you to review this page periodically.
12

Contact the nos138 Data Protection Officer

If you have any questions, concerns, or complaints regarding how nos138 handles your personal data, please contact the nos138 Data Protection Officer (DPO) through the following channels:

Privacy Email
privacy@nos138.biz
Live Chat 24/7
Available on the platform
Response Time
14 business days

If you are dissatisfied with how nos138 has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) in accordance with the procedures set out under PDPA 2010.

Your Data, Your Control

Join nos138 with Confidence — Your Privacy and Security Are Guaranteed

Nos138 is fully committed to protecting your personal information in accordance with Malaysia's PDPA 2010 standards. Register now and enjoy a platform that is safe, fair, and transparent.

Terms & Conditions  ·  Responsible Gaming  ·  Frequently Asked Questions

Bahasa Melayu