128Casino respects and prioritises the privacy of every member. This document transparently explains how we collect, use, store and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Six core principles that guide how 128Casino handles the personal data of Malaysian members
128Casino operates in full compliance with all provisions of Malaysia's Personal Data Protection Act 2010. We have an appointed Data Protection Officer (DPO) responsible for ensuring that all data handling practices comply with applicable Malaysian law.
128Casino only collects data that is strictly necessary for defined purposes — managing accounts, processing financial transactions, complying with KYC/AML regulations, and improving the user experience. We do not collect data beyond what is required.
128Casino has never and will never sell, rent, or disclose members' personal data to third parties for marketing purposes without your explicit consent. Data is shared only with technical service providers bound by strict confidentiality agreements.
All personal and financial data of 128Casino members is protected with 256-bit SSL encryption during transmission and storage. Our databases are secured with multi-layered firewalls, strict access controls and real-time intrusion detection systems.
As a 128Casino member, you have the full right to access your data, correct inaccurate information, request a copy of your data, object to certain types of processing, and request the deletion of your account and data in accordance with the Malaysia PDPA.
In the event of any data breach affecting members' personal information, 128Casino will notify the affected members and the relevant authorities within 72 hours of the breach being detected, in accordance with industry best practice standards.
An overview of the categories of data we collect and why
Full name, date of birth, MyKad or passport number, Malaysian residential address, mobile number, and email address.
Payment method used (TnG, GrabPay, DuitNow, FPX), deposit and withdrawal records, transaction history, and any financial limits you have set.
Gaming history, bets placed, wins and losses, favourite games (slots, baccarat, sports, e-sports) and platform usage patterns.
IP address, device type, operating system, web browser, location data (state within Malaysia), and platform access logs for security purposes.
Records of customer support conversations, emails, complaints, and feedback you submit to the 128Casino team for service improvement purposes.
Session cookies, performance cookies and user preference cookies that help the 128Casino platform function more smoothly and personalise your experience.
128Casino ("we", "platform", or "the Company") values the trust you place in us when sharing your personal information while using our services. This Privacy Policy clearly and transparently explains how we collect, use, disclose, transfer, and protect your personal data.
This policy applies to all users of the 128Casino platform, including registered members, website visitors and anyone who interacts with our platform through any channel — the 128casino.ws website, mobile platform, email and other communication channels.
By registering for or using the 128Casino platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy 128Casino constitutes the entire agreement between you and our platform.
128Casino collects personal data through two primary methods:
128Casino uses your personal data for the following purposes:
128Casino processes your personal data on valid legal bases under the Personal Data Protection Act 2010 of Malaysia:
128Casino does not sell members' personal data. We only share data in the following limited circumstances:
All third parties that receive data from 128Casino are required to uphold data protection standards equal to or stricter than our own, and are prohibited from using that data for any purpose other than those specified.
128Casino retains your personal data for as long as it is needed for the purpose it was collected, or as long as required under Malaysian law:
Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.
128Casino implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
While we implement all reasonable security measures, no online system is 100% secure. You are also responsible for keeping your 128Casino account password safe and not sharing it with anyone.
Under the Malaysia Personal Data Protection Act 2010 (PDPA), you as a 128Casino member have the following rights regarding your personal data:
| Your Rights | Description | Available |
|---|---|---|
| Right to Access | Request a copy of all personal data we hold about you | |
| Right to Rectification | Request the correction of inaccurate or incomplete data | |
| Right to Withdraw Consent | Withdrawing consent for data processing at any time (for consent-based processing) | |
| Right to Object | Object to the processing of your data for direct marketing purposes | |
| Right to Erasure | Request deletion of your data (subject to statutory retention obligations) | |
| Right to Lodge a Complaint | Filing a complaint with the Department of Personal Data Protection Malaysia if you are not satisfied |
To exercise any of the rights above, please contact us by email at support@128casino.ws with the subject line "Personal Data Rights Request". We will respond within 21 working days.
128Casino uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:
You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of the 128Casino platform.
128Casino members' personal data is primarily stored and processed on servers located in Malaysia or within the Asia-Pacific region. In some cases, data may be processed outside Malaysia by our accredited technical service providers.
Any transfer of data outside Malaysia is carried out only with parties that provide a level of data protection equivalent to or higher than that required under Malaysia's PDPA 2010, and with appropriate safeguards including valid data processing agreements.
128Casino does not transfer member data to countries without adequate data protection legislation unless appropriate contractual safeguards are in place.
The 128Casino platform is strictly for individuals aged 18 and above. We do not knowingly collect, store or process the personal data of minors.
Should we discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate action to delete that data and close the associated account. If you believe a child's data has been collected through our platform, please contact us immediately at support@128casino.ws.
128Casino reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or industry developments. When material changes are made:
We encourage you to review this Privacy Policy from time to time. Your continued use of the 128Casino platform after any amendments take effect constitutes your acceptance of the updated policy.
For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 128Casino, please contact our Data Protection Officer (DPO):
We are committed to responding to all privacy-related enquiries within 21 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia responsible for enforcing the PDPA 2010.
For requests that require identity verification (such as data access or deletion), we may ask you to provide sufficient proof of identity before we can process your request, in order to protect your privacy.