Official Documents

Mitra138 Privacy Policy – Platform User Data Protection

At mitra138, your privacy is not merely a legal obligation — it is our commitment to every member. This policy transparently explains how we collect, use, store, and protect your personal information.

Last updated: 1 January 2026  |  Effective immediately

Key Summary: mitra138 is committed to protecting your personal information. We do not sell your personal data to third parties. All data is processed solely for platform operations and improving user experience as described in this Privacy Policy.

1Introduction & Scope of This Policy

This Privacy Policy is issued by mitra138 and applies to all users who access or use our platform via the website, mobile app, or any other digital channel. It describes our practices regarding the collection, use, disclosure, and protection of your personal information.

By registering an account or continuing to use the mitra138 platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team to close your account.

Mitra138 takes its responsibilities as a data controller seriously. We implement robust technical and organizational measures to ensure your personal information is always protected, lawfully processed, and used only for the purposes clearly stated in this policy.

This policy should be read together with Terms and Conditions and Responsible Gaming Policy us for a comprehensive overview of how we handle your data and safeguard your interests.

2Personal Information We Collect

We collect various types of information depending on how you interact with the mitra138 platform. The following are the main categories of data we collect:

Data Category Example Information Purpose of Collection
Personal Identity Full name, date of birth, IC or passport number KYC verification & age eligibility
Contact Information Email address, phone number, residential address Account communication & verification
Financial Data Bank account details, transaction history Deposit & withdrawal processing
Game Data Betting records, wins, losses, game preferences Account management & responsible gaming
Technical Data IP address, device type, browser, operating system Platform security & improvement
Usage Data Pages visited, session duration, clicks, searches Analytics & experience improvement

We only collect data that is genuinely necessary to operate the platform. A "minimum data collection" principle is practised — if information is not needed, we do not request it.

3How We Use Your Information

The personal information we collect is used for legitimate and limited purposes. Specifically, we use your data to:

  • Manage your account — including registration, login, identity verification (KYC), and member profile maintenance.
  • Process financial transactions — deposits, withdrawals, and bonus adjustments are processed using the payment details you provide.
  • Provide gaming services — to ensure a smooth, secure, and fair gaming experience for every member.
  • Meet regulatory obligations — including anti-money laundering (AML), counter-terrorism financing (CFT), and data protection law compliance requirements.
  • Service communication — sending important notifications related to your account, security, and platform updates via email or in-app notification system.
  • Promotions and marketing — with your consent only, we send you information about the latest mitra138 offers, bonuses, and promotions.
  • Security and fraud prevention — detecting, investigating, and preventing fraudulent activity, unauthorized access, and policy violations.
  • Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.

We will not use your data for any purpose not stated in this policy without obtaining your consent first.

4Data Sharing & Disclosure

Mitra138 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, in certain limited situations, we may need to share your data with the following parties:

  • Payment Processors: Required transaction information is shared with PCI-DSS certified third-party payment processors to securely handle your deposits and withdrawals.
  • Technology Service Providers: Technical partners that help operate the platform, such as cloud hosting providers, analytics services, and customer support systems — all subject to strict confidentiality agreements.
  • Regulatory Authorities & Law Enforcement: When lawfully required by legislation, court order, or direction from the relevant authorities.
  • Anti-Fraud Authority: To monitor and prevent cross-platform fraudulent activity, certain data may be shared with industry fraud prevention networks.

Responsible Sharing Guarantee: Any third party that receives your data through mitra138 is required to handle that information in accordance with data protection standards equal to or higher than our own.

5Data Security Measures

The security of your data is the highest priority at mitra138. We implement multiple layers of technical and procedural protection to keep your information safe at all times:

  • 256-bit SSL Encryption: All data transmitted between your device and mitra138 servers is protected with industry-grade SSL encryption. Data cannot be intercepted or read by third parties during transmission.
  • Most Sensitive Data Storage: Sensitive information such as passwords is stored in hashed form using modern cryptographic algorithms. No one on our team can view your original password.
  • Two-Factor Authentication (2FA): We offer two-factor authentication for your account as an added layer of security during login.
  • 24/7 Secure Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
  • Internal Access Controls: Access to members' personal data among our staff is restricted and governed strictly on a need-to-know basis. All access is logged and audited regularly.
  • Regular Security Audits: The mitra138 platform undergoes regular penetration testing and security audits by independent security experts.

While we take all reasonable steps to protect your data, no system is 100% secure. You also play an important role — make sure your password is strong, unique, and never shared with anyone.

6Cookies & Tracking Technologies

Mitra138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

  • Essential Cookies: Required for core platform operations such as login authentication and game sessions. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collect information about how you use our platform to help us improve overall performance and user experience.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices for a more personalised experience.
  • Analytics Cookies: We use analytics tools to understand platform usage patterns on an aggregated and anonymised basis. This data helps us make data-driven decisions for continuous improvement.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the mitra138 platform.

7Data Retention Period

Mitra138 retains your personal information for as long as necessary to fulfill the purposes stated in this policy, or as required by applicable laws and regulatory obligations.

  • Active Account Data: Retained for the duration your account is active and for the required period following account closure to fulfil legal obligations.
  • Financial Transaction Records: Retained for a minimum of 5 years after a transaction occurs, in line with financial and AML legal requirements.
  • KYC Records: Identity verification documents are retained for a minimum of 5 years after account closure or the date of the last transaction.
  • Security Logs: Retained for 12 months for security incident investigation purposes if required.
  • Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

When data is no longer needed, we securely delete it using industry-standard deletion methods to ensure it cannot be recovered.

8Your Rights as a Data Subject

As a mitra138 user, you have important rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

1

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 30 days.

2

Right to Rectification

If any information we hold is inaccurate or outdated, you have the right to request prompt correction.

3

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to applicable legal obligations.

4

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without providing a reason.

5

Right to Data Portability

You may request that your personal data be handed directly to you or transferred to another data controller in a machine-readable format.

6

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights: To submit any request related to your privacy rights, please contact the mitra138 customer support team via live chat or email. We will process your request within 30 business days from the date of receipt.

9Child Data Protection

The mitra138 platform is exclusively for adult users aged 18 and above. We does not intentionally collect any personal information from individuals under the age of 18.

If we find that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. If you have reason to believe that a child has registered on our platform, please notify us immediately through our customer support channels.

10Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team is ready to assist. You may contact us via:

  • Live Chat: Available 24 hours a day, 7 days a week via the mitra138 platform
  • Support Email: [email protected] (displayed as text only)
  • FAQ Page: Browse our FAQ page for answers to frequently asked questions about privacy and security

Mitra138 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. Any material changes will be communicated to you via your registered email or a prominent notice on the platform before the changes take effect.

We aim to respond to all privacy-related inquiries within 2 working days. For urgent account security issues, please use live chat for the fastest response.

How mitra138 Protects Your Privacy

Six layers of protection we place between your data and external threats.

End-to-End Encryption

All communication between your device and mitra138 servers is protected by 256-bit SSL encryption. Your data cannot be read or intercepted by any third party while in transit.

Trusted KYC

The Know Your Customer (KYC) process at mitra138 ensures every account belongs to a real individual whose identity and age have been verified, protecting all members from identity fraud.

No Data Sales

Your personal information is never sold, rented, or traded to advertisers or third-party data brokers. Your data is used solely to operate and improve mitra138 services.

24/7 Threat Monitoring

Our automated security system monitors the platform around the clock to detect unauthorised access attempts, unusual account activity, and any potential data security threats.

Privacy Controls in Your Hands

You have full control over your data. Request access, correction, or deletion at any time. Marketing opt-out is readily available and takes effect immediately.

Industry Standards Compliance

Mitra138 complies with international data protection standards and the regulatory requirements of the online gambling industry. Independent security audits are conducted periodically to ensure ongoing compliance.

Play Safe & Confident at mitra138

Your privacy and security are always our priority. Register an account today and enjoy a secure, transparent, and enjoyable online gaming experience with thousands of members across Malaysia.

Bahasa Melayu