How rupiah138 Protects Your Data
A plain-language overview of our key data protection commitments to every registered Member.
AES-256 Encryption
All personal data stored on rupiah138 servers is encrypted using industry-standard AES-256 encryption. Your account credentials, KYC documents, and financial records are protected at rest and in transit via SSL/TLS protocols.
No Data Selling
rupiah138 does not sell, rent, or trade your personal data to third-party marketing companies. Your information is shared only with service providers who are contractually bound to protect it, and only where necessary to deliver our services.
Your Rights as a Data Subject
You have the right to access, correct, and — in certain circumstances — request deletion of the personal data we hold about you. Submit a data subject request to our support team and we will respond within 30 days.
Minimal Data Collection
We collect only the personal data that is strictly necessary to provide our services, fulfil our legal obligations under applicable law, and verify your eligibility to use the Platform. We do not collect data speculatively.
Defined Retention Periods
Personal data is retained for no longer than is necessary to fulfil the purpose for which it was collected, or as required by law. Account data is typically retained for up to five (5) years after account closure to meet AML obligations.
Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, rupiah138 will notify affected Members as soon as practicable and will take all reasonable steps to contain the breach and prevent recurrence.
1 Introduction
This Privacy Policy (hereinafter referred to as the "Policy") describes how rupiah138 ("we", "us", "our", or "the Platform") collects, processes, stores, and discloses personal data relating to individuals ("you", "the User", or "Member") who access or use the services available athttps://rupiah138.cam.
rupiah138 is committed to protecting your privacy and processing your personal data in a lawful, fair, and transparent manner. This Policy is written in compliance with applicable data protection laws and regulations and reflects our obligations as an operator serving players in Malaysia and internationally.
By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.
This Policy applies to all personal data collected through the rupiah138 website, mobile-optimised interface, live chat support, email correspondence, and any other interaction you have with the Platform or our support team.
2 Definitions
The following terms have the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | rupiah138, which determines the purposes and means of processing your personal data. |
| "Data Processor" | A third-party entity that processes personal data on behalf of rupiah138, pursuant to our instructions and a written data processing agreement. |
| "KYC Data" | Identity and verification documents submitted by a Member during the Know Your Customer (KYC) process, including government-issued IDs, proof of address, and selfie images. |
| "Cookies" | Small text files placed on your device by the Platform to store preference data, session identifiers, and analytical information about your browsing behaviour. |
| "Platform" | The rupiah138 website and associated services accessible at https://rupiah138.cam. |
3 Personal Data We Collect
rupiah138 collects personal data from you directly (when you provide it) and automatically (through your use of the Platform). The categories of personal data we collect include:
3.1 Registration and Account Data
- Full legal name, date of birth, and gender
- Residential address (including city — for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
- Email address and mobile phone number
- Username and encrypted password
- Preferred currency (MYR/RM)
3.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification documents (e.g., Malaysian MyKad, Passport, Driver's Licence)
- Proof of residential address documents (e.g., utility bills, bank statements issued within the preceding three months)
- Selfie images taken for identity confirmation purposes
- Source of funds documentation, where requested
3.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including amounts MYR and timestamps
- Payment method identifiers (e.g., DuitNow account reference, FPX bank code, Touch'n Go eWallet ID, Boost or GrabPay reference, Maybank / CIMB / Public Bank / Hong Leong account details)
- Cryptocurrency wallet addresses (where applicable)
- Bonus and promotional activity records
3.4 Gaming Activity Data
- Wager amounts, game selections, bet history, and session duration
- Sports betting selections, including markets such as EPL, Liga Super Malaysia, and UFC
- Responsible gambling tool usage (deposit limits, session limits, self-exclusion records)
3.5 Technical and Usage Data
- IP address, browser type and version, operating system, and device identifiers
- Pages visited, session duration, click-through paths, and referring URLs
- Cookie and tracking technology data as further described in Section 7
3.6 Communications Data
- Records of communications with our support team via live chat or email
- Feedback, complaints, and dispute correspondence
4 Legal Basis for Processing
rupiah138 processes your personal data one or more of the following legal bases:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and rupiah138, including account registration, payment processing, game delivery, and KYC verification.
- Legal Obligation: Processing is necessary for compliance with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and regulatory reporting obligations.
- Legitimate Interests: Processing is necessary for rupiah138's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and product improvement — provided these interests do not override your fundamental rights and freedoms.
- Consent: Where we rely on your consent as the legal basis for processing (for example, for certain marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
5 How We Use Your Personal Data
The personal data we collect from you is used for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Account, including processing deposits and withdrawals in MYR via DuitNow, FPX, and Malaysian bank accounts. |
| Identity Verification | Conducting KYC checks to verify your identity, age (21+ requirement), and eligibility to use the Platform in accordance with our legal and licensing obligations. |
| Fraud & AML Prevention | Monitoring transactions and account activity to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. |
| Customer Support | Processing and responding to your support requests, complaints, and enquiries via live chat or email. |
| Responsible Gambling | Monitoring gaming activity to identify potentially problematic behaviour and administering self-exclusion, deposit limits, and cooling-off periods as requested. |
| Legal Compliance | Fulfilling regulatory reporting obligations, responding to lawful requests from competent authorities, and retaining records as required by applicable law. |
| Platform Improvement | Analysing aggregated usage data to improve the performance, features, and security of the Platform. |
| Promotions (with consent) | Where you have opted in, sending you information about bonuses, promotions, and relevant Platform updates. |
6 Data Sharing and Disclosure
rupiah138 does not sell your personal data. We may share your personal data with third parties only in the following circumstances:
- Payment Processors and Financial Institutions: Where necessary to process your deposit or withdrawal, we share relevant transaction data with payment partners including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and the relevant Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong). These partners process data under their own privacy policies and applicable regulatory frameworks.
- Identity Verification Providers: Third-party KYC verification services that assist us in confirming your identity and age in compliance with our obligations.
- Game and Software Providers: Platform gaming providers who supply the slot, live casino, and sports betting content available on the Platform. Only the minimum data necessary for game delivery and integrity purposes is shared.
- Regulatory and Law Enforcement Authorities: We may disclose personal data to governmental bodies, regulatory authorities, and law enforcement agencies where required to do so by applicable law, court order, or as part of our AML/CFT compliance obligations.
- Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to strict confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of rupiah138's business, personal data held by us may be transferred to the acquiring entity, subject to the same level of data protection as provided under this Policy.
Important: All third-party Data Processors engaged by rupiah138 are required to enter into data processing agreements that mandate compliance with applicable data protection standards. We do not permit our processors to use your data for their own purposes.
7 Cookies and Tracking Technologies
rupiah138 uses cookies and similar tracking technologies to provide core functionality, improve user experience, and gather analytical data about Platform usage. The types of cookies we use are as follows:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without significantly impairing Platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — including pages visited, session duration, and navigation paths. This information is used in aggregate form to improve Platform performance and user experience.
- Functional Cookies: These cookies allow the Platform to remember your preferences, such as your preferred language, display settings, and previously used payment methods, so that you do not need to re-enter them on subsequent visits.
- Marketing and Targeting Cookies: Where you have provided consent, these cookies may be used to deliver relevant promotional content and to measure the effectiveness of our marketing communications. You may withdraw consent for marketing cookies at any time.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed guidance on managing cookies on your browser, please consult your browser's help documentation.
8 Data Retention
rupiah138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Account and KYC Data: Retained for a minimum of five (5) years following account closure to fulfil anti-money laundering and regulatory record-keeping obligations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial regulations.
- Gaming Activity Data: Retained for up to three (3) years from the date of each gaming session, used for responsible gambling monitoring, dispute resolution, and platform integrity purposes.
- Support Communications: Retained for up to two (2) years from the date of the last communication, unless the subject matter of the communication gives rise to an ongoing dispute or legal obligation requiring longer retention.
- Technical and Usage Data: Anonymised or aggregated usage data may be retained indefinitely for statistical and analytical purposes, provided it can no longer be attributed to any identifiable individual.
Where data is no longer required for any lawful purpose, rupiah138 will securely delete or anonymise it in accordance with our internal data destruction procedures.
9 Data Security
rupiah138 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- Encryption: AES-256 encryption is applied to stored personal data and KYC documents. All data transmitted between your device and the Platform is protected using SSL/TLS encryption (HTTPS).
- Access Controls: Access to personal data is restricted to authorised personnel who require it for legitimate operational purposes. All access is logged and subject to regular audit.
- Two-Factor Authentication: Our internal systems require multi-factor authentication for all administrative access to Member data.
- Penetration Testing: The Platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities.
- Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and any relevant supervisory authority as required by applicable law.
While rupiah138 employs robust security practices, no method of electronic transmission or storage is entirely risk-free. You also play an important role in protecting your personal data — please ensure your Account password is strong, unique, and kept confidential.
rupiah138 will never contact you requesting your password, full payment card number, or one-time password (OTP). If you receive any such request purporting to be from us, do not respond — contact our support team immediately.
10 Your Rights as a Data Subject
Subject to applicable data protection law, you have the following rights in respect of the personal data that rupiah138 holds about you:
Right of Access
You may request a copy of the personal data we hold about you, together with information about how it is processed.
Right to Rectification
You may request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
In certain circumstances, you may request deletion of your personal data, subject to our overiding legal obligations.
Right to Restriction
You may request that we restrict the processing of your personal data in specified circumstances pending resolution of a query or complaint.
Right to Portability
You may request a structured, machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
Right to Object
You may object to processing carried out on the basis of our legitimate interests, including for direct marketing purposes.
To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within five (5) business days and respond in full within thirty (30) days. In complex cases, this period may be extended by a further two months, of which we will notify you.
Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain under AML regulations, even upon your request.
11 Children and Minors
The rupiah138 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by an individual who does not meet this age requirement, we will take immediate steps to close the Account, return any deposited funds, and securely delete the associated personal data.
If you are a parent or guardian and believe that a minor has registered an Account on the Platform, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action.
21+ Policy: All Members are required to complete age verification as part of the KYC process. Access to the Platform is contingent upon successful verification of age eligibility. For players aged 21 and above only.
12 Changes to This Privacy Policy
rupiah138 reserves the right to update or revise this Privacy Policy at any time. Where we make material changes — for example, changes to how we use your personal data or your rights as a data subject — we will notify registered Members by email at the address associated with their Account, and/or by posting a prominent notice on the Platform homepage.
Changes become effective upon the date stated in the updated Policy. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement and acceptance of the revised Policy. If you do not agree with the revised terms, you should cease using the Platform and request account closure.
The "Last Updated" date shown at the top of this page indicates when the Policy was most recently revised. We recommend that you review this page periodically to stay informed of how your personal data is being used and protected.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 10, please contact us through the following channels:
- Data Privacy Enquiries — Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 via the Platform's live chat widget. For data privacy matters, please specify "Privacy Request" in your opening message so we can route your query to the appropriate team.
- Subject Line: For email requests relating to personal data, please use the subject line "Data Subject Request" or "Privacy Enquiry" to ensure prompt handling.
We aim to acknowledge all privacy-related communications within five (5) business days. For data subject access requests, we will provide a full response within thirty (30) days as required under applicable data protection law.
rupiah138 actively serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We are committed to providing a safe, transparent, and responsible gaming environment for all eligible Members.
Your Data Is Safe With rupiah138
We take our commitment to your privacy seriously. If you have any questions about how we handle your personal data, our support team is available around the clock. Ready to explore the Platform?
For players aged 21 and above only. Please gamble responsibly.