Koin138 Privacy Policy – Malaysian Member Data Protection

1Introduction

Koin138 is an online casino platform operating in Malaysia, fully committed to protecting the privacy of its members. We understand that your personal data is a trust you place in us, and we do not take that responsibility lightly.

This Privacy Policy is designed to give you a clear and transparent picture of koin138's data processing practices — without confusing legal jargon. We want you to know exactly what data we hold about you, why we need it, and who may have access to it.

Koin138 operates in accordance with strict data protection standards. All personal information you share with us — whether during registration, deposits via FPX or DuitNow, or when contacting our support team — is handled with full responsibility and professionalism.

This policy applies to all users of the koin138 platform, including website visitors, registered members, and any individuals who interact with our services through any channel.

2Data We Collect

Koin138 only collects data that is genuinely necessary to provide our services safely and effectively. The following are the categories of data we may collect:

Identity Data

• Full name as stated on your MyKad or Malaysian passport
• MyKad number or passport number
• Date of birth
• Gender
• Photo of identity document (collected during the KYC process)

Contact Data

• An active Malaysian phone number
• Email address
• Current residential address in Malaysia

Financial Data

• Malaysian bank account details (account number and bank name) for withdrawal purposes
• E-wallet details used — Touch 'n Go eWallet, GrabPay, Boost or ShopeePay
• Deposit and withdrawal transaction records in MYR
• Betting history and gaming activity

Technical & Usage Data

• IP address of the device used
• Device type and web browser
• Cookie data and login session data
• Records of gaming session times and duration
• Language preferences and account settings

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. koin138 uses your personal information for the following:

Koin138 will not use your data for any purpose beyond those stated above without first obtaining your consent. Whenever we intend to use your data for a new purpose, you will be informed and given the choice to agree or decline.

4Legal Basis for Processing

Koin138 only processes your personal data on a lawful basis. There are four primary bases we rely on:

• Contract Performance: Data processing required to fulfil our contractual obligations to you as a koin138 member — including processing deposits, withdrawals and the provision of gaming services.
• Legal Obligation: Data processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification (KYC), and financial reporting as required by the relevant authorities.
• Legitimate Interest: Data processing for purposes that serve koin138's legitimate interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests do not override your fundamental right to privacy.
• Consent: For optional marketing communications and analytics, we will only process your data once we have your explicit consent. You may withdraw this consent at any time through your account settings or by contacting the koin138 support team.

5Data Sharing with Third Parties

Koin138 does not sell your personal data to any third party for marketing or commercial purposes. However, to deliver our services properly, we may share necessary data with the following categories of third parties:

• Payment Service Providers: Malaysian payment gateways that process FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay transactions — only the data required to process each transaction is shared.
• Game Software Providers: Third-party game software providers that supply slots, live casino, poker, and roulette on the koin138 platform — they receive only the technical data required to run the games.
• Technical Service Providers: IT infrastructure providers, cloud services and cybersecurity partners that help us operate the koin138 platform securely and efficiently.
• Relevant Authorities: Law enforcement agencies, financial regulatory bodies, or competent courts where required under applicable Malaysian law.

All third parties who receive koin138 member data are bound by strict confidentiality agreements and are required to protect that data to the same or higher standard that we apply. Koin138 does not share your data with affiliated companies or business partners for their own marketing purposes without your explicit consent.

6Data Security

Koin138 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure. Our key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser and koin138's servers is encrypted using the same TLS protocol used by major Malaysian financial institutions and banks.
• Encrypted Data Storage: Sensitive data such as passwords is stored in hashed format using modern encryption algorithms — even koin138 staff cannot view your original password.
• Two-Factor Authentication (2FA): Available to all member accounts as an additional security layer to prevent unauthorised access, even if your password is compromised.
• 24/7 Security Monitoring: The koin138 security team continuously monitors platform activity to detect and respond to any security threats or intrusion attempts.
• Internal Access Controls: Only koin138 employees who require access to specific data to perform their duties are permitted to do so — based on the principle of least privilege.
• Regular Security Audits: koin138 conducts regular penetration testing and independent security audits to ensure our systems remain protected against the latest threats.

While koin138 takes all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. You also play an important role in keeping your account secure — do not share your password, and enable 2FA on your koin138 account.

7Data Retention Period

Koin138 does not retain your personal data for longer than necessary. Retention periods vary according to data category and legal requirements:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after closure to meet our legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysian anti-money laundering (AML) and accounting requirements.
• KYC data (identity verification): Retained for a minimum of 5 years after the business relationship ends, or longer if required by law.
• Technical & Security Logs: Retained for 90 days for security and investigation purposes, after which it is automatically deleted.
• Customer Support Communication Data: Retained for 2 years from the date of the last interaction for reference and quality assurance purposes.
• Marketing Data (with consent): Retained until you withdraw consent or request deletion.

Once the specified retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any individual. The deletion process follows strict security standards to ensure the data cannot be recovered.

8Cookies & Tracking Technologies

The koin138 platform uses cookies and similar technologies to enhance the user experience, ensure the platform functions correctly and analyse usage patterns. There are four types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Stores your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how members use the koin138 platform — the most frequently visited pages, session duration and navigation patterns — so we can improve our services.
• Security Cookies: Used to detect and prevent fraudulent activity, suspicious login attempts and other security threats.

You can manage your cookie settings through your internet browser at any time. Disabling certain cookies may affect the functionality or your experience on the koin138 platform. Continued use of the platform is considered acceptance of our essential cookies.

9Your Privacy Rights as a Member

As a koin138 member, you have strong rights over your personal data. We are committed to respecting and facilitating the exercise of the following rights:

To exercise any of the above rights, contact the koin138 support team via live chat or email at support@koin138.click. We will process your request within the stipulated timeframe and may require identity verification before releasing sensitive data.

10Children's Data

Koin138 is an online gambling platform that for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered on the koin138 platform are encouraged to contact us immediately at support@koin138.click.

11Privacy Policy Amendments

Koin138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. Any material amendments — those that significantly affect your privacy rights — will be communicated to you via:

• A clear notice on the homepage or within the koin138 platform when you log in
• Email to the registered email address on your account (for significant changes)
• Update the "Last Updated" date at the top of this page

Continued use of the koin138 platform after any changes to the Privacy Policy are published constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.

12Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how koin138 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the koin138 platform — the fastest way to get an immediate response
• Email: support@koin138.click — for privacy enquiries that require a written response or documentation
• Ticketing System: For data access, correction or deletion requests that require a formal process

All privacy-related complaints will be acknowledged within one business day and resolved within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.