Privacy Policy Hemat138 – Player Data Protection

Hemat138 takes your privacy seriously. This document clearly explains how we collect, use, store, and protect the personal data of every registered member in Malaysia.

256-bit
SSL Encryption
12
Policy Sections
0
Third-Party Data Sales
24/7
Security Monitoring

Hemat138's Data Protection Commitment

Six core principles that underpin how hemat138 handles the personal data of Malaysian players

Bank-Grade Encryption

All personal data and financial transactions at hemat138 are protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. Your data cannot be read by any unauthorised party.

No Data Sales

Hemat138 never sells, rents, or commercialises players' personal data to any third party for marketing purposes. Your information is used solely for the purposes explicitly stated in this privacy policy.

Data Minimisation

Hemat138 only collects data that is strictly necessary to deliver our services to you. We do not request irrelevant information and do not retain data for longer than is required for operational purposes.

Player Data Controls

You have every right to access, correct, and request the deletion of your personal data held by hemat138. Data-related requests can be submitted to our support team at any time.

Standards Compliance

Hemat138 complies with the data protection requirements set by the relevant authorities. Our data protection practices are reviewed on a regular basis to ensure they remain current and meet the latest standards.

Full Transparency

Hemat138 is committed to promptly notifying players should any security incident occur that may affect their personal data. We do not withhold information that is important to our members.

HEMAT138 DATA SECURITY TECHNOLOGY & STANDARDS

SSL 256-bit Encryption Enterprise-Grade Firewall Certified Secure Servers Anonymised Data for Analytics Access Logs Monitored 24/7 Staff Security Training
This Privacy Policy was last updated on 1 January 2026 and takes effect immediately for all hemat138 members.

Important Note: By registering and using the hemat138 platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read this document carefully. If you have any questions, contact the hemat138 support team via live chat.

1 Introduction – hemat138's Privacy Commitment

Hemat138 understands that privacy is something Malaysian players take seriously. When you register and play at hemat138, you are entrusting us with your personal information, and we do not take that trust lightly.

This Privacy Policy clearly explains how hemat138 collects, uses, stores, protects and — in certain limited circumstances — shares your personal information. We have written this document in plain, straightforward language rather than confusing legal jargon, because we believe every player deserves to know exactly what happens to their data.

Hemat138 operates as an online entertainment platform offering slots, Live Casino, table games, Sports Betting on football, badminton, cricket, and a variety of other digital entertainment to players in Malaysia. In delivering these services, the collection and processing of personal data is an unavoidable operational necessity — however, we are committed to handling it in the most responsible manner possible, with full respect for your privacy.

Data Controller: Hemat138 acts as the data controller for all personal information collected through the hemat138.club platform. This means hemat138 is responsible for determining the purpose and manner in which your personal data is processed.

2 Types of Personal Data Collected

Hemat138 collects various categories of personal data depending on how you interact with our platform. Here is a breakdown of the data collected:

Data Categories Example Information Mandatory / Optional
Identity Information Full name, MyKad number (if requested for KYC), date of birth Mandatory
Contact Information Malaysian phone number, email address Mandatory
Financial Information E-wallet account numbers (Touch 'n Go, GrabPay, DuitNow), bank account numbers for FPX transfers Required for transactions
Transaction Data Deposit, withdrawal, wagering, and winnings records at hemat138 Auto-generated
Technical Data IP address, device type, web browser, operating system, session time Auto-generated
Usage Data Games played, pages visited, session duration, game preferences Auto-generated
Communications Data Live chat conversation records, customer support emails When contacting support

Hemat138 does not collect sensitive personal data such as your medical information, sexual orientation, religious beliefs, or political views.

3 How hemat138 Collects Data

Hemat138 collects your personal data through several methods:

  • Directly from You: When you complete the hemat138 registration form, submit KYC documents, contact the support team, or update your account information.
  • Automatically: When you use the hemat138 platform, our systems automatically record technical and usage data such as your IP address, device type and activity patterns within the platform.
  • Via Cookies: hemat138 uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and analyse how players use our platform. Further details are provided in Section 7.
  • From the Payment Provider: When you make a deposit or withdrawal via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX, we receive the necessary transaction confirmation details from the relevant payment service provider.
  • From Game Providers: Third-party game providers partnered with hemat138 may share technical data related to your gaming sessions for troubleshooting and service improvement purposes.
4 Purposes for Using Personal Data

Hemat138 uses your personal data for the following legitimate and transparent purposes:

  • Account Management: Registering, verifying and managing your hemat138 account, including processing logins, password verification and session management.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handling your winnings withdrawals in Malaysian Ringgit (MYR).
  • Identity Verification (KYC): To verify your identity for compliance purposes and to confirm age eligibility and prevent fraud.
  • Service Delivery: Provides access to all games and platform features at hemat138, including slots, Live Casino, table games, and Sports Betting.
  • Customer Support: Handling enquiries, resolving complaints, and providing technical assistance to hemat138 players.
  • Platform Security: Detecting and preventing fraud, multi-accounting, money laundering, and other security threats against the hemat138 platform and community.
  • Service Improvement: Analysing usage patterns to improve the interface, reduce technical issues, and design new features better suited to Malaysian players.
  • Service Communications: Sending important notifications relating to your account, changes to our terms, or relevant promotions (where you have provided consent).
  • Legal Compliance: To comply with applicable legal requirements, regulations, and lawful authority orders.

Marketing Communications: hemat138 only sends you marketing communications if you have given explicit consent during registration or at a later stage. You may withdraw this consent at any time through your hemat138 account settings, with no negative impact on your access to our services.

5 Data Sharing with Third Parties

Hemat138 does not sell or commercialise your personal data. However, in certain limited and legitimate situations, hemat138 may share your data with the following parties:

  • Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and other FPX providers receive the transaction information required to process your deposits and withdrawals. These providers maintain their own privacy policies and are responsible for the data they handle.
  • Game Providers: Providers such as Evolution Gaming, Pragmatic Play, and others partnering with hemat138 receive the technical data necessary to run your game sessions. This data is limited strictly to what is required for game functionality.
  • Identity Verification Services: Third-party KYC service providers engaged by hemat138 to verify player identities for compliance and fraud prevention purposes.
  • Legal Authorities: Hemat138 will disclose personal data to the relevant authorities when required by law, court order, or valid legal process. Hemat138 will endeavour to notify affected players of any such disclosure unless prohibited by law.
  • Business Transfer: In the event of a merger, acquisition, or transfer of hemat138's business assets, user data may be transferred as part of those business assets. Players will be notified in advance of any such changes.

In all cases where data is shared with third parties, hemat138 ensures that appropriate data protection agreements are in place to safeguard your data.

6 Data Storage & Security

Hemat138 retains your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by law. Retention periods vary depending on the type of data:

  • Active Account Data: Retained for the lifetime of your hemat138 account and for up to 7 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with accounting and financial regulatory requirements.
  • Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
  • Technical Data & Access Logs: Retained for 90 days for security and technical troubleshooting purposes.

The technical security measures hemat138 employs to protect your data include:

  • 256-bit SSL encryption for all data in transit between your device and hemat138's servers.
  • Sensitive data stored in the hemat138 database is encrypted using industry-recognised algorithms.
  • Strict access controls — only staff who require access to specific data to carry out their duties are granted the relevant permissions.
  • Continuous 24-hour security monitoring to detect any unauthorised access attempts.
  • Regular vulnerability assessments and penetration testing conducted by independent security experts.
  • Mandatory data protection training for all hemat138 staff involved in data processing.

Note: While hemat138 takes extensive security measures, no system can guarantee 100% absolute security. You are also responsible for keeping your hemat138 account password safe and not sharing it with anyone.

7 Cookies & Tracking Technologies

Hemat138 uses cookies and similar technologies to enhance your experience on our platform. Here are the types of cookies we use:

  • Necessary Cookies (Required): These cookies are essential for the core functionality of the hemat138 platform, such as maintaining your login session, remembering your language preferences and ensuring session security. They cannot be disabled without affecting the platform's functionality.
  • Performance Cookies: These cookies help hemat138 understand how players interact with the platform — which pages are visited most, which games are most popular, and where players encounter technical issues. This data is used to improve the hemat138 platform and is fully anonymised.
  • Functional Cookies: These cookies remember your preferences and settings — such as default bet size, favourite games, and display settings — to deliver a more personalised experience on hemat138.

You can manage cookies through your web browser settings. However, disabling all cookies may affect the functionality of the hemat138 platform and your gaming experience. Hemat138 does not use third-party advertising cookies or cross-site tracking technologies for external marketing purposes.

8 Player Rights Regarding Personal Data

As a hemat138 player, you have the following rights regarding your personal data held by hemat138:

Right of Access

You have the right to request a copy of the personal data hemat138 holds about you. We will provide this information within 30 days of receiving your request.

Right to Rectification

If the personal data hemat138 holds about you is inaccurate or incomplete, you have the right to request an immediate correction at no charge.

Right to Erasure

You have the right to request the deletion of your personal data under certain circumstances. Please note that some data must be retained to fulfil legal obligations.

Right to Restrict Processing

You have the right to request that hemat138 restrict the processing of your data under certain circumstances — for example, while the accuracy of your data is under review.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format, and to transfer it to another data controller where applicable.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.

To exercise any of the above rights, please contact the hemat138 support team via live chat or email at support@hemat138.club. We will process your request within 30 days. For complex or multiple requests, we may require up to 60 days and will notify you of this accordingly.

9 Protection of Children's Data

The hemat138 platform is strictly for individuals aged 18 and above. Hemat138 does not knowingly collect or process personal data from individuals under the age of 18.

If hemat138 discovers that personal data belonging to a child or individual under 18 years of age has been collected without appropriate age verification, we will take immediate steps to:

  • Closes the associated account with immediate effect.
  • Permanently deleting all associated personal data from hemat138 systems.
  • Withholding and refunding any financial balance held in the associated account.

If you believe that someone under the age of 18 has registered an account on hemat138, please contact us immediately at support@hemat138.club so that prompt action can be taken.

10 Cross-Border Data Transfers

In operating the hemat138 platform and working with international service providers such as game providers, your personal data may be processed outside of Malaysia. This includes countries where game providers such as Evolution Gaming and Pragmatic Play maintain their server infrastructure.

When personal data is transferred outside Malaysia, hemat138 ensures that equivalent protections to those provided within Malaysia are maintained through:

  • Binding data processing agreements with all third-party providers that handle hemat138 player data.
  • Selection of providers that comply with internationally recognised data protection standards.
  • Regular reviews of providers' data protection practices to ensure ongoing compliance.
11 Changes to This Privacy Policy

Hemat138 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate our services.

When there are material changes to this privacy policy, hemat138 will:

  • Updating the "last updated" date at the top of this page.
  • Displaying a clear notification within the hemat138 platform upon your next login.
  • In the event of highly significant changes, we may send a notification through the communication channels registered to your account.

Continued use of the hemat138 platform after any Privacy Policy changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed of hemat138's latest privacy practices.

12 Contact hemat138 Regarding Privacy

If you have any questions, concerns or complaints about how hemat138 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the hemat138 platform. The fastest way to get an immediate response.
  • Email: support@hemat138.club — please state "Privacy Enquiry" in your email subject line to help us handle your request promptly. Typical response time is under 24 hours.

The hemat138 privacy team will endeavour to respond to all privacy-related enquiries within 5 business days. For formal requests such as data access, correction, or deletion, please submit a written request via email along with your hemat138 account details (do not include your password) to facilitate verification.

Hemat138 welcomes your feedback on our privacy practices. We are committed to continually improving the way we protect and respect the privacy of every Malaysian player who trusts us with their personal data.

FAQ – Hemat138 Privacy Policy

The most frequently asked questions from Malaysian players on privacy and data protection at hemat138

No, hemat138 never sells, rents, or commercialises players' personal data to any third party for marketing or any other purposes. Your data is shared only with parties directly involved in delivering hemat138's services to you — such as payment providers Touch 'n Go or GrabPay when processing your transactions, or game providers while you are playing. All such data sharing is limited to what is strictly necessary and is governed by binding data protection agreements.

Your financial information at hemat138 is protected by multiple layers of security. All data is encrypted with SSL 256-bit during transmission. Your full e-wallet or bank account numbers are not stored in plain text within hemat138's systems — they are encrypted and held in a format that is unreadable without the appropriate decryption key. hemat138 staff do not have access to your full account numbers. Furthermore, hemat138 does not store your e-wallet or online banking login credentials — you log in directly to the relevant payment platform when making a transaction.

Yes, you have the right to request the deletion of your personal data from hemat138's systems. However, please note that certain data must be retained by hemat138 to meet legal obligations — for example, financial transaction records must be kept for 7 years in accordance with accounting requirements. Data not subject to any legal retention obligation will be deleted within 30 days of a valid request. To initiate a data deletion request, contact the hemat138 team by email at support@hemat138.club with "Data Deletion Request" stated in the subject line.

When you close your hemat138 account, your personal data is not deleted immediately. hemat138 retains your data for as long as necessary to fulfil legal obligations — typically up to 7 years for financial transaction records. Data that is not subject to any legal retention obligation will be deleted or anonymised within 12 months of account closure. During this retention period, access to your data is strictly limited and used solely for compliance purposes.

Hemat138 has a comprehensive security incident response plan to address any data breaches that may occur. If hemat138 suspects or confirms a data breach affecting players' personal information, we will take the following steps: identify and immediately contain the source of the breach, take measures to minimise the impact on affected players, notify the relevant authorities within the timeframe prescribed by law, and inform affected players about the incident — including the type of data that may have been exposed and steps they can take to protect themselves. Hemat138 is committed to full transparency in handling such incidents.
View All FAQs

Your Data Is Safe at Hemat138

Play with confidence at hemat138 — a platform that protects your data with 256-bit SSL encryption, never sells your information, and gives you full control over your personal data. Register for free today.

Register a Free Account Log In
256-bit SSL Data Security No Data Sales Full Player Control
Responsible Gaming – hemat138

Hemat138 believes that healthy entertainment starts with good self-control. We encourage all players to set comfortable limits, avoid playing with money needed for daily expenses, and seek help if gaming starts to feel like a problem. This service is for individuals aged 18 and above only. For more information and self-control tools, please visit the Responsible Gaming us.

Bahasa Melayu