Agen138 takes the privacy of every Malaysian player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information.
Privacy at Agen138 is not a checkbox exercise. These are the six concrete commitments that define how we handle the personal information of every player across Malaysia.
Every connection between your browser and Agen138 is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, personal details, and financial data are encrypted in transit and at rest at all times.
Agen138 collects only the personal data that is genuinely necessary to operate the Platform, verify your identity, process your transactions, and comply with our legal obligations. We do not collect data "just in case."
Agen138 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used to operate and improve our Platform — not as a product to be monetised by external advertisers.
You hold meaningful rights over your personal data, including the right to access, correct, restrict, and in certain cases delete your information. Requests are handled within 30 days. See Section 10 of this Policy for the full list of your rights.
We do not retain your personal data for longer than necessary. Our data retention schedule is published in Section 8 of this Policy. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data governance procedures.
Where we share data with third-party service providers — such as payment processors, KYC verification services, and game content providers — we do so under strict data processing agreements. All partners are contractually bound to protect your data to the same standard as Agen138.
This Privacy Policy ("Policy") describes how Agen138 ("Company", "We", "Us", "Our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "You") who access or use the Agen138 online gaming platform available at agen138.cam ("the Platform").
Agen138 is an English-language online casino and sports betting platform serving players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. All financial transactions are processed in Malaysian Ringgit (MYR).
We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.
Your consent matters: Where we rely on consent as a legal basis for processing, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, all of which form part of your agreement with Agen138.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identity number, email address, phone number, payment details, and IP address. |
| "Processing" | Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, use, disclosure, or deletion. |
| "Data Controller" | Agen138, which determines the purposes and means of processing player personal data. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of Agen138, under a data processing agreement. |
| "KYC" | Know Your Customer — the identity and address verification process required by Agen138 prior to processing withdrawal requests. |
| "Cookies" | Small data files stored on a player's device by the Platform to enable session management, analytics, and personalisation features. |
| "Special Category Data" | Sensitive personal data including health information, biometric data, or financial details, which are subject to enhanced protection measures. |
Agen138 collects personal data across several categories, depending on how you interact with the Platform. The categories of data we may hold about you are summarised below:
We do not collect: We do not collect, store, or process full payment card numbers. Where card-based payment methods are used, all card details are handled directly by PCI-DSS compliant payment processors and are never transmitted to or stored on Agen138 servers.
Agen138 collects personal data through the following channels:
You provide personal data to us directly when you: register an account; complete the KYC verification process; make a deposit or request a withdrawal; contact our support team; or respond to surveys or promotions.
When you access and use the Platform, we automatically collect technical and behavioural data via server logs, cookies, and similar tracking technologies. This includes your IP address, device information, session data, and in-Platform activity. See Section 11 for details on our use of cookies.
We may receive personal data about you from third-party sources in limited circumstances, including:
We process your personal data for the following specific, documented purposes:
| Purpose | Data Used |
|---|---|
| Account registration & management | Identity data, contact data, technical data |
| KYC identity verification | Identity data, document images, financial data |
| Processing deposits & withdrawals | Financial data, identity data |
| Game delivery & sports betting settlement | Usage data, financial data |
| Bonus & promotion administration | Usage data, financial data, identity data |
| Fraud detection & AML compliance | All categories of data |
| Responsible gambling monitoring | Usage data, financial data, communications data |
| Customer support | Communications data, identity data, financial data |
| Platform analytics & improvement | Technical data, usage data (anonymised where possible) |
| Marketing communications (where opted in) | Contact data, usage data, behavioural data |
| Legal and regulatory compliance | All categories of data, as required |
Agen138 processes personal data on one or more of the following lawful bases:
Agen138 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:
We engage trusted third-party service providers to assist in operating the Platform. These providers act as data processors under written data processing agreements and are contractually prohibited from using your data for any purpose beyond the specific service they provide. They include:
We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, or where disclosure is necessary to protect the safety of players or the public.
In the event of a merger, acquisition, or sale of all or a substantial portion of Agen138's business or assets, player personal data may be transferred as part of that transaction. We will notify affected players by email prior to any such transfer, and we will ensure the acquiring entity commits to equivalent privacy protections.
We never: sell, rent, lease, or trade your personal data to third parties for their own marketing or advertising purposes. Your data is not a revenue stream for us.
Agen138 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC documents and verification records | 5 years from submission (AML compliance requirement) |
| Financial transaction records | 7 years from transaction date (regulatory requirement) |
| Game and betting history | 5 years from account closure |
| Customer support communications | 3 years from last interaction |
| Marketing consent records | Until consent withdrawn, plus 1 year for audit purposes |
| Technical logs and IP records | 13 months from collection |
| Self-exclusion records | Permanent (to prevent re-registration) |
Upon expiry of the applicable retention period, personal data is securely deleted from live systems or anonymised such that it can no longer be linked to an identifiable individual.
Agen138 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Player responsibility: While we implement robust security measures, you also play a role in protecting your account. Always use a strong, unique password. Enable 2FA. Never share your login credentials with any third party. Contact support immediately if you suspect your account has been compromised.
As a player on the Agen138 Platform, you hold the following rights with respect to your personal data. We will respond to all valid requests within thirty (30) calendar days of receipt:
To exercise any of the above rights, please contact our support team via live chat or at the email address provided in Section 14 of this Policy. We may need to verify your identity before processing your request.
Agen138 uses cookies and similar tracking technologies on the Platform to deliver a functional, personalised, and secure gaming experience. This section explains the types of cookies we use and how you can manage them.
| Cookie Type | Required? | Purpose |
|---|---|---|
| Strictly Necessary | Yes | Enable core Platform functionality including login session management, security tokens, and fraud prevention. These cannot be disabled without breaking the Platform. |
| Functional | Optional | Remember your preferences such as language, game lobby layout, and deposit method to provide a more personalised experience. |
| Analytics | Optional | Collect anonymised data on how players navigate and interact with the Platform to help us identify and fix usability issues and improve features. |
| Marketing | Optional | Track Platform interactions to measure the effectiveness of our promotional campaigns. Only deployed where you have given explicit consent. |
You can manage your cookie preferences via the cookie consent banner displayed on your first visit to the Platform, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features.
Agen138 uses secure, server-side session tokens to authenticate your login session and maintain the integrity of your account throughout your visit. These session tokens are not accessible to client-side scripts and expire upon logout or after a defined period of inactivity.
Agen138 is strictly an adults-only platform. Registration and use of the Platform is prohibited for any person under the age of 21 years. We do not knowingly collect, store, or process the personal data of individuals under this age.
21+ AGE ENFORCEMENT: We verify the age of all registered players through our KYC process. Any account discovered to belong to a person under the age of 21 will be immediately suspended, all personal data deleted (subject to any mandatory retention obligations), and deposits returned where practicable. We take underage gambling extremely seriously and will report confirmed cases to relevant authorities where required.
If you believe that a minor has registered an account on the Platform using false age information, please contact our support team immediately at the address in Section 14 of this Policy. We will investigate and take appropriate action without delay.
Agen138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.
Where a material change is made to this Policy — particularly any change that affects how we use or share your personal data — we will notify registered players by email to the address held on their account, and we will display a prominent notice on the Platform for a minimum of thirty (30) days following the change.
Your continued use of the Platform following notification of any change constitutes your acceptance of the revised Policy. If you do not accept a change, you should cease using the Platform and contact our support team to close your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which Agen138 handles your personal data, please contact our Data & Privacy team using the details below:
Our support team communicates entirely in English and is familiar with Malaysian banking practices, local payment methods, and the regulatory environment applicable to Malaysian players. You will not be redirected to an overseas call centre with no knowledge of local context.
Identity verification: To protect the security of your personal data, we may request proof of identity before processing a data access, rectification, or erasure request. This is to ensure that personal data is not disclosed to or altered by an unauthorised third party.
Hundreds of thousands of Malaysian players trust Agen138 with their personal data every day. We back that trust with real security, transparent policies, and a support team that is always on hand to answer your questions.
For players aged 21 and above only. Gambling involves financial risk — play responsibly. Responsible Gambling →