MR138 Privacy Policy

This Privacy Policy applies to MR138 and describes the treatment of personal data associated with the website at https://mr138.cam, player accounts, customer support, gaming activity, promotions, security controls, and payment services. It should be read together with the MR138 Terms & Conditions and Responsible Gambling information.

By using MR138, you acknowledge that your personal data may be processed as described in this policy. Where consent is required for a particular activity, MR138 will request it separately. Refusing optional processing will not affect core services unless the requested data is necessary to provide those services.

For this policy, personal data means information that identifies a person or can reasonably be linked to an identifiable person. Processing includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, deleting, or otherwise handling personal data.

This policy covers registered players, website visitors, people who communicate with MR138 support, and individuals whose information is supplied for account or payment verification. It does not govern third-party services that operate independently of MR138, although information shared with service providers remains subject to contractual and security controls where appropriate.

The information collected by MR138 depends on how you interact with the platform. A visitor browsing general information provides less data than a registered player who deposits, places wagers, requests a withdrawal, or completes identity verification.

MR138 may also create analytical or risk indicators from existing information, such as account security scores, unusual transaction alerts, bonus eligibility, or responsible gambling observations. Such indicators support review processes and are not intended to make assumptions about characteristics unrelated to the service.

Most information is supplied directly when you register, update your account, contact MR138, complete KYC, select a payment method, or place a wager. MR138 also collects technical and transaction records automatically as necessary to operate and secure the platform.

Information may be received from payment providers, identity verification services, game providers, sports data services, fraud prevention partners, and customer support systems. For Malaysian players, this may include transaction confirmation associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong. MR138 does not require these providers to disclose complete passwords or security credentials.

MR138 processes personal data for the following purposes:

• Creating, authenticating, maintaining, and securing player accounts;
• Confirming that players satisfy the minimum age requirement of 21 years;
• Providing casino games, live dealer services, and sports betting markets, including EPL and Liga Super Malaysia coverage;
• Recording wagers, calculating results, settling winnings, and maintaining accurate balances;
• Processing deposits and withdrawals in MYR through available payment channels;
• Detecting account sharing, fraud, bonus abuse, collusion, chargebacks, and other prohibited conduct;
• Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
• Responding to questions, complaints, payment disputes, and technical support requests;
• Improving platform reliability, navigation, content relevance, and service quality; and
• Sending service notices and, where permitted, relevant promotional communications.

Depending on the context, processing may be necessary to perform the agreement with you, protect the legitimate interests of MR138 and its players, comply with applicable requirements, establish or defend legal claims, protect vital interests, or act on your consent.

MR138 may require identity, age, address, payment ownership, and source-of-funds checks before enabling certain functions or approving a withdrawal. Requested documents may include a valid identity document, proof of address, a verification photograph, a redacted payment statement, or reasonable evidence showing how deposited funds were obtained.

Documents are used to confirm that the account belongs to an eligible player, reduce financial crime and identity theft risks, and ensure withdrawals are directed to the correct person. MR138 may restrict account activity while verification is incomplete or while information is being reviewed.

Payment providers process parts of a transaction under their own technical and legal responsibilities. MR138 generally receives transaction status, references, ownership information, and limited account details rather than complete card, bank, or e-wallet security credentials.

MR138 may use first-party cookies and similar storage technologies to maintain sessions, remember preferences, support authentication, measure website performance, and identify suspicious activity. Essential technologies are required for secure operation and cannot always be disabled without affecting account functions.

Browser controls may allow you to remove or block cookies. Doing so may sign you out, prevent preferences from being saved, or interfere with gaming, payment, and verification features. MR138 does not use cookies to gain access to unrelated files or information stored elsewhere on your device.

Technical Logs

Server and security logs may record access time, IP address, browser information, device identifiers, requested pages, login attempts, and error events. These records help MR138 investigate account compromise, improve reliability, and distinguish legitimate use from automated or abusive traffic.

MR138 does not sell player personal data. Information may be shared only where reasonably necessary with selected service providers that support payments, identity checks, hosting, cybersecurity, game operation, analytics, customer support, professional advice, and responsible gambling controls.

Service providers receive only the information required for their assigned function and are expected to apply appropriate confidentiality and security measures. MR138 may also disclose information where reasonably necessary to respond to a lawful request, prevent harm, investigate suspected fraud, enforce the Terms & Conditions, protect legal rights, or complete a legitimate corporate restructuring.

If account activity involves a payment reversal or disputed wager, relevant transaction and account records may be supplied to the bank, e-wallet provider, game provider, or dispute reviewer handling the matter.

Some MR138 service providers, technical systems, or professional advisers may operate outside Malaysia. Consequently, personal data may be processed in countries whose privacy rules differ from Malaysian requirements.

Where an international transfer occurs, MR138 takes reasonable steps to use appropriate contractual, organisational, and technical protections. These may include confidentiality commitments, restricted access, security requirements, data minimisation, and approved transfer arrangements where applicable.

MR138 retains personal data for as long as an account remains active and for a reasonable period afterwards where required for transaction records, fraud prevention, disputes, security, responsible gambling, accounting, or other legitimate obligations. Different categories of information may have different retention periods.

A request to close an account does not always result in immediate deletion. MR138 may need to retain identity, payment, gaming, exclusion, complaint, and security records to prevent duplicate registration, honour self-exclusion, resolve outstanding matters, or establish and defend legal claims.

When information is no longer required, MR138 will take reasonable steps to delete it, anonymise it, or place it beyond routine use. Aggregated information that no longer identifies a player may be retained for statistical and service improvement purposes.

MR138 uses layered administrative, organisational, and technical safeguards designed to protect personal data. Measures may include access controls, authentication, encryption in transit, system monitoring, secure development practices, restricted staff permissions, backup procedures, incident response, and service provider reviews.

No website or transmission method can guarantee absolute security. Players also have an important role in protecting their information. Use a unique password, keep verification codes private, sign out on shared devices, and contact MR138 promptly if you notice an unfamiliar login, payment, or account change.

Subject to applicable requirements and valid exceptions, you may ask MR138 to provide access to personal data, correct inaccurate information, explain how data is used, restrict certain processing, withdraw consent, or delete information that is no longer required.

To protect account security, MR138 may request identity verification before acting on a privacy request. A request may be limited or refused where disclosure would affect another person's rights, reveal confidential security controls, undermine fraud prevention, conflict with mandatory retention, or interfere with an active dispute.

MR138 will review privacy requests within a reasonable period and may ask for clarification if the scope is unclear. You should keep account information current so that important payment, security, and policy notices reach you.

MR138 may send operational messages about verification, payments, security, account changes, responsible gambling, and updates to legal terms. These service communications are not promotional and may continue while required to administer an account.

Promotional messages about eligible bonuses, casino games, live football markets, or other MR138 services may be sent where permitted. Players may change eligible marketing preferences through available account settings or by asking customer support. An opt-out request may take a short period to apply across active systems.

Withdrawing marketing consent does not prevent MR138 from using data for account administration, security, payment processing, responsible gambling, or other purposes that do not depend on marketing consent.

MR138 services are strictly limited to persons aged 21 and above. MR138 does not knowingly permit younger persons to register, deposit, or gamble. Age and identity checks may be conducted at registration, before withdrawal, or whenever eligibility is uncertain.

If MR138 has reason to believe an account belongs to a person under 21, access may be suspended while the matter is investigated. A parent or guardian who believes a younger person has submitted personal information should contact support using the plain-text details below.

MR138 may update this policy to reflect changes in services, technology, security practices, payment arrangements, or applicable privacy requirements. The current version will be published on this page with an updated review date.

Where a change materially affects how personal data is used, MR138 may provide an additional notice through the website, account area, or registered contact details. Continued use of the platform after an update takes effect is subject to the revised policy.

Questions, complaints, or requests concerning this Privacy Policy may be directed to MR138 customer support. Please include your username, a concise description of the request, and enough information for the team to identify the relevant account without sending passwords or one-time security codes.

The support email is displayed as plain text and is not a clickable link. MR138 may need to verify your identity before disclosing, correcting, restricting, or deleting account information.