K138 takes your privacy seriously. This document clearly sets out what data we collect, how it is used, and how we protect it — so you can play with peace of mind.
K138 complies with international data protection standards to ensure your personal information remains secure at all times.
All data transmitted between your device and k138's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks, including Maybank and CIMB.
K138 only collects personal information that is strictly necessary to provide its services — there is no excessive data collection unrelated to the purpose of your account and transactions.
K138 never sells, rents or shares members' personal information with third parties for marketing purposes without your explicit consent. Your data belongs to you — it is not a business commodity of k138.
K138 sets clear data retention periods and does not retain your personal information longer than necessary to fulfil the purpose for which it was collected or as required by applicable law.
Every k138 member has the right to view, request a copy of, correct, or request the deletion of their personal data. Requests can be submitted through k138 support and will be processed within the stipulated timeframe.
K138's operations comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection principles, ensuring the privacy of Malaysian members is fully upheld.
This Privacy Policy explains how k138 ("Platform", "We", "k138") collects, uses, stores, and protects personal information provided by members ("You") when using the k138 online entertainment platform at k138.click and all related services.
By registering an account or using the k138 platform, you agree to the collection and use of your personal information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us at support@k138.click.
K138 is an online entertainment platform operating exclusively for the Malaysian market, offering Sports Betting, Live Casino, lottery, virtual sports, and a wide range of other games. In running this platform, k138 needs to collect and process certain personal information from its members for legitimate purposes that are clearly set out in this Privacy Policy.
This Privacy Policy applies to all personal information collected by k138 through:
This Privacy Policy is written in Bahasa Melayu for the convenience of Malaysian members. If there is any uncertainty regarding its content, please contact the k138 support team for clarification before using the platform.
K138 collects various types of personal information based on your interactions with the platform. The following are the main categories of data we collect:
| Data Category | Example Information | How It Is Collected |
|---|---|---|
| Identity Data | Full name, date of birth, identity card number | Registration forms, KYC verification |
| Contact Data | Phone number, email address, mailing address | Registration form, profile updates |
| Financial Data | Bank account details, e-wallet numbers, transaction history | Deposit & withdrawal process |
| Usage Data | Game history, betting records, login logs, account activity | Platform automated systems |
| Technical Data | IP address, device type, browser, approximate location | Cookies and tracking technologies |
| Communication Data | Live chat conversation records, support emails, complaints | Customer Support Interaction |
K138 does not collect credit or debit card details directly – all payments are processed through secure third-party payment gateways such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, each of which maintains its own privacy policy.
K138 uses the personal information it collects solely for the following legitimate, stated purposes:
k138 does not store your personal data to make automated decisions that could significantly affect you without human involvement. Any material decisions regarding your account are subject to review by the responsible k138 team.
K138 does not sell your personal data to any party. However, in the course of operating the platform, k138 may need to share certain personal data with the following categories of third parties, within a limited and purposeful scope:
All third parties receiving personal data of k138 members are bound by strict confidentiality and data protection agreements. k138 is not responsible for the privacy policies of third parties that operate independently outside of k138's direct control.
K138 takes data security seriously and invests in robust infrastructure to protect the personal information of all Malaysian members from potential threats. Key security measures implemented by k138 include:
While k138 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role — use a strong password, do not share your login credentials, and contact k138 immediately if you suspect any unauthorised activity on your account.
The k138 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and maintain the security of your login session. Below are the types of cookies used by k138:
You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect certain functions of the k138 platform, including the ability to stay securely logged in.
K138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal and regulatory requirements. The following are retention period guidelines for key data categories:
Upon expiry of the stipulated retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.
As a k138 member, you have the following rights regarding your personal data held by the platform. All requests can be submitted by email to support@k138.click or via k138 support live chat.
K138 fully respects and upholds the privacy rights of every Malaysian member
You have the right to request a copy of all personal data that k138 holds about you. k138 will provide the copy within 30 days of receiving your request.
If the personal data held by k138 is inaccurate or incomplete, you have the right to request a correction and k138 is obliged to update it promptly.
Under certain circumstances, you have the right to request the deletion of your personal data from k138's systems, subject to applicable record-keeping obligations under the law.
You may request that k138 restrict the processing of your personal data under certain circumstances — for example, while you are disputing the accuracy of your data or questioning the legitimacy of the processing.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you choose to do so.
You may object to the processing of your personal data for direct marketing purposes at any time. k138 will cease processing for that purpose unconditionally upon receiving your request.
To exercise any of the above rights, contact the k138 privacy team at support@k138.click by stating the right you wish to exercise. k138 will respond within 30 working days.
The k138 platform is intended exclusively for individuals aged 18 years and above. k138 does not intentionally collect or process the personal data of any individual under the age of 18.
If k138 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. Parents or guardians with concerns about their child's use of the platform are advised to contact k138 immediately at support@k138.click.
In the course of platform operations, k138 members' personal data may be processed or stored on servers located outside Malaysia — including by technology service providers and game suppliers operating in other countries.
K138 ensures that any transfer of personal data outside Malaysia is carried out with adequate safeguards in place, including:
Cross-border data transfers are a standard part of modern online entertainment platform operations and are carried out with appropriate safeguards in place. If you would like to know more about specific data transfers, please contact k138 for further information.
K138 reserves the right to update or amend this Privacy Policy at any time as required by changes in platform operations, legal requirements, or industry best practices. When material changes are made to this policy:
K138 encourages members to review this Privacy Policy page from time to time to stay informed about how we protect your personal information.
If you have any questions, concerns, or requests regarding k138's Privacy Policy or how we handle your personal data, please contact the k138 privacy team through the following channels:
K138 is committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe. We believe that open communication about our privacy practices is fundamental to the trust that must exist between the platform and its members.
By registering for or using the k138 platform, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. This Privacy Policy forms part of your overall agreement with k138 together with the relevant Terms & Conditions.
Policy Effective Date: 1 January 2026 | Version: 2026.1
When you register an account on any online platform, you are entrusting that platform with your personal information. This is a trust k138 does not take lightly. Within Malaysia's online entertainment industry, there are platforms that may not give adequate attention to protecting their users' data. k138 is different — we believe that strong privacy is not merely a legal requirement, but the foundation of trust that must be built with every member.
Many Malaysian users are unaware of just how much information online platforms collect about them. From your IP address revealing your approximate location, to transaction histories reflecting your financial habits, to gameplay patterns that expose your sleep schedule and daily routine — all of this is potentially sensitive data. k138 collects this information not to exploit members, but for legitimate, clearly stated operational purposes. More importantly, k138 protects this data to the highest security standards and never sells it to third parties.
When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, or FPX via Maybank2u, your transaction information is processed through a secure payment gateway. k138 does not store or have access to your full bank account number or credit/debit card details — these are handled entirely by payment providers with their own high-grade security systems. What k138 receives and retains is only the transaction confirmation and the amount transferred — just enough to credit your account and process your withdrawals later.
This is another reason why k138 only allows withdrawals to accounts held in the same name as your k138 account. This policy isn't meant to inconvenience members — it's an important security layer that protects your winnings from being taken by unauthorised parties who may have gained access to your account. Even if someone manages to log in to your k138 account without permission, they still cannot withdraw your funds to another account, thanks to this strict name-matching requirement.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), every Malaysian citizen and resident has legal rights over their personal data. k138 fully complies with the PDPA and the rights it grants to users. This means that if you wish to view all the data k138 holds about you, you may request it and k138 is obligated to provide it. If any data is inaccurate, you may request a correction. If you wish to close your account and have your data deleted, k138 will do so — subject to legal obligations for retaining financial records.
One thing many Malaysian users overlook is the importance of keeping their account details up to date. A current phone number and email address are essential, as these are k138's primary channels for reaching you in the event of a security emergency or when verifying an important transaction. Make sure your contact details in your k138 account profile are always accurate — this isn't just an administrative formality, it's a core part of your own account security.
Here are some best practices that k138 encourages all Malaysian members to follow: First, use a unique, strong password for your k138 account that is not used on any other platform. A good password is at least 12 characters long and combines uppercase and lowercase letters, numbers, and symbols. Second, enable two-factor authentication (2FA) where available for an added layer of security. Third, never log in to your k138 account over an unsecured public WiFi network — use your own mobile data or a password-protected home network instead. Fourth, regularly review your account transaction records to spot any activity you do not recognise.
K138 also encourages members to stay vigilant against phishing attempts that may try to trick you into revealing your login credentials. k138 will never send an email asking for your password, contact you via WhatsApp asking you to transfer money to another number, or request identity card details through unsecured channels. If you receive any communication that appears to be from k138 but suspiciously requests sensitive information, report it to k138 support immediately — we will verify whether it is legitimate or a fraudulent attempt.
Finally, k138 wants to reaffirm our commitment: your privacy is not simply a box to tick on a legal compliance checklist. It is a core value we genuinely believe in — one we invest real resources in upholding. Every MYR you deposit into your k138 account, every game you enjoy, and every win you receive all take place in an environment that k138 maintains with full commitment to keeping your data and privacy protected. That is k138's promise to every Malaysian member who has placed their trust in this platform.
This Privacy Policy should be read together with k138 Terms & Conditions for a full overview of your rights and responsibilities as a platform member. For information on responsible gaming and self-control tools, please refer to the Responsible Gaming at k138. Further enquiries may be directed to support@k138.click.
K138's Malay-speaking support team is ready to help you understand how we handle your personal data. Reach us 24 hours a day, 7 days a week.