PDPA 2010 Compliant

Harta138 Privacy Policy – Personal Data Protection Malaysia

Your privacy is more than a legal obligation to harta138 — it is a moral responsibility we take seriously. Find out exactly how your data is collected, used, and protected.

Updated: 1 January 2026  |  Bahasa Malaysia

Harta138 Complies with Malaysia's Personal Data Protection Act (PDPA 2010)

This Privacy Policy is formulated in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). All processing of harta138 member personal data is carried out in accordance with PDPA principles including notice & choice, disclosure, security, data integrity, access, and accountability.

SSL
256-bit Encryption

Harta138's 6 Privacy Promises to You

Here is how harta138 protects the personal data of every Malaysian member — in concrete, measurable terms

Bank-Grade Data Encryption
All your personal and financial data at harta138 is protected by 256-bit SSL encryption — the same level of security used by Maybank, CIMB, and other major Malaysian banks. Data remains unreadable even if intercepted in transit.
No Data Sales to Third Parties
harta138 has never sold, rented, or traded members' personal data to any third party for marketing purposes or any purpose unrelated to platform operations, and never will. Your data is not our business commodity.
Full PDPA 2010 Compliance
All data processing activities at harta138 are carried out in compliance with Malaysia's Personal Data Protection Act 2010. We have a Data Protection Officer (DPO) responsible for ensuring ongoing adherence to all PDPA provisions.
Strict Internal Access Controls
Only harta138 staff who require access to specific data to carry out their duties will be granted such access. All access to member data is automatically logged and monitored. Any unauthorised access will be detected and reported.
Right to Erasure
You have the right to request deletion of your personal data from harta138's systems at any time, subject to legally mandated record retention requirements. Deletion requests will be processed within 30 business days.
Data Breach Notification
In the event of any security incident involving harta138 member data, we are committed to notifying affected members within 72 hours and taking immediate remedial action in accordance with PDPA requirements.

Important Note: By registering for or using the harta138 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this policy, please discontinue use of harta138's services. This policy should be read together with the Terms & Conditions harta138.

1

Personal Data We Collect

Harta138 collects various types of personal data depending on how you interact with our platform. The following are the categories of data that may be collected:

Personal Identification Data:

  • Full name as stated on your Malaysian MyKad
  • MyKad number — collected during the KYC process only
  • Date of birth and gender
  • Residential address in Malaysia
  • Photo or selfie image (during KYC verification)

Contact Data:

  • An active Malaysian mobile number
  • A valid email address

Financial Data:

  • Malaysian bank account information (bank name, account number) for withdrawal purposes
  • Deposit and withdrawal transaction history
  • Payment methods used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX/Maybank2u, CIMB Clicks)

Platform Usage Data:

  • Betting and gaming activity history
  • Type of games played (live casino, slots, Sports Betting, e-sports)
  • Game session times and duration
  • Login and logout history

Technical Data:

  • Device IP address
  • Internet browser type and operating system
  • Device type (smartphone, laptop, tablet)
  • Cookie and session tracking data

Data Minimisation Principle: Harta138 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. Where data is no longer required, it will be deleted or anonymised in accordance with our data retention schedule.

2

How Data Is Collected

Your personal data is collected by harta138 through several methods:

  • Account Registration: When you register a new account at harta138, you voluntarily provide the personal information required.
  • KYC Process: During identity verification for withdrawals or upon compliance request, you will be asked to submit identification documents.
  • Financial Transactions: Every deposit and withdrawal made via local Malaysian payment methods automatically records the transaction details.
  • Platform Usage: Your betting activity — including wagers on Malaysia Super League football, live casino, MPL Malaysia esports, and slots — is automatically recorded for security and compliance purposes.
  • Cookies & Tracking Technologies: When you visit and use the harta138 platform, cookies and related technologies are used to enhance your user experience.
  • Customer Support: When you contact the harta138 support team via Live Chat or email, those conversations are recorded for quality control and dispute resolution purposes.
3

Purpose of Personal Data Use

Harta138 uses the personal data collected for the following purposes. Each use has a valid legal basis:

Identity verification & KYC process Legal Obligations
Deposit & withdrawal processing Contract Performance
Fraud prevention & anti-money laundering (AML) Legal Obligations
Customer support services Contract Performance
Platform usage analytics & improvements Legitimate Interest
Promotional communications & notifications Consent
Responsible gaming programme Public Interest

Harta138 will not use your personal data for any purpose not stated in this policy without first obtaining your additional consent.

4

Data Sharing with Third Parties

Harta138 does not sell or disclose members' personal data to third parties, except under the following circumstances:

  • Payment Service Providers: Minimum transaction data required is shared with licensed Malaysian payment providers such as DuitNow, FPX processors, and digital wallet operators (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) solely for the purpose of processing your transactions.
  • Game Providers: Required account information is shared with harta138's game provider partners (such as Evolution for live casino and Pragmatic for slots) under strict confidentiality agreements.
  • Malaysian Authorities: Data may be disclosed to the relevant Malaysian authorities when required by law, including lawful requests from the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or a court of competent jurisdiction.
  • Technology Providers: Technology service providers that support the operation of the harta138 platform (such as cloud computing services) may have limited access to data solely for technical purposes, and are bound by data protection agreements.

Our Commitment: All third parties that receive data from harta138 are required to protect that data to a security standard equal to or higher than that of harta138 itself. harta138 does not share data with third-party advertising companies or data brokers.

5

Data Security Measures

Harta138 implements multiple layers of technical and organisational security to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

  • Transmission Encryption: All communications between your browser and harta138's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
  • Storage Encryption: Sensitive data stored in harta138's databases is encrypted at rest using the AES-256 standard.
  • Two-Factor Authentication (2FA): Harta138 offers and encourages the use of 2FA on all member accounts as an added layer of security.
  • 24/7 Monitoring: harta138's security systems are monitored around the clock to detect and respond to any security threats in real time.
  • Regular Security Audits: The harta138 platform undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities.
  • Role-Based Access Control: harta138 staff only have access to the data necessary for their specific role, with all access logged and monitored.
6

Cookie Policy

Harta138 uses cookies and similar tracking technologies to enhance your platform experience. The following types of cookies are used:

You can manage your cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality and user experience of the harta138 platform.

7

Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by harta138:

8

Data Retention Period

Harta138 retains your personal data for as long as your account remains active, or for as long as necessary to fulfil the purposes outlined in this policy. Our data retention principles are as follows:

  • Active Account Data: Retained for as long as your account is active and for 7 years after account closure to comply with Malaysian AML legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records.
  • Support Communication Log: Retained for 3 years for dispute resolution purposes.
  • Cookie & Technical Data: Retained for the duration specified in the cookie schedule, not exceeding 2 years.
  • Marketing Data: Retained until you withdraw consent or the account has been inactive for 2 consecutive years.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any individual. The data deletion process is scheduled and executed automatically in accordance with harta138's data retention policy.

9

Links to Third-Party Sites

The harta138 platform may contain links to third-party websites, including game providers, payment providers, or related information sources. Harta138 is not responsible for the privacy practices or content of these third-party sites.

We strongly encourage you to read the privacy policy of any third-party website you visit via links from the harta138 platform. This Privacy Policy applies solely to use of the harta138.ws platform and does not cover your interactions with any other website.

10

Changes to This Privacy Policy

Harta138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or operational requirements. Any changes will take effect upon publication on this page with a new "Updated" date.

For material changes that significantly affect your privacy rights, harta138 will endeavour to notify you via in-platform notification or email at least 14 days before the changes take effect. Your continued use of the harta138 platform after notice of changes has been given constitutes your acceptance of the updated Privacy Policy.

11

Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how harta138 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: privacy@harta138.ws
  • General Support Email: support@harta138.ws
  • Live Chat: Available on the harta138 platform 24/7 in Bahasa Melayu

We aim to respond to all privacy enquiries within 14 business days. For requests requiring more in-depth investigation, we may need up to 30 business days and will keep you informed of your request's status throughout.

If you are not satisfied with harta138's response to your privacy inquiry, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital. harta138 will cooperate fully with any official investigation conducted by the relevant authorities.

Your Privacy Rights Under PDPA 2010

As a harta138 member, you have the following rights, which you may exercise at any time

Right of Access
Request a copy of your personal data held by harta138
Right to Rectification
Correct inaccurate or incomplete data in your account
Right to Erasure
Requesting deletion of your data when it is no longer needed
Right to Restriction
Restricting the processing of your data under certain circumstances
Right to Object
Object to the processing of your data for direct marketing purposes
Right to Portability
Receive your data in a reusable format
Withdraw Consent
Withdrawing marketing consent at any time
Right to Complain
Filing a complaint with the Department of Personal Data Protection Malaysia

To exercise any of the above rights, contact us at privacy@harta138.ws with your written request.

Harta138 Privacy FAQ

Simple answers to the most frequently asked questions about personal data protection at harta138

No. Harta138 has never and will never sell or share member personal data with third-party advertising companies, data brokers, or any marketing entities. Your data is used solely for internal purposes to improve our platform and services, and is shared with critical service providers (such as payment processors) only to the extent necessary for operations, under strict confidentiality agreements.

Harta138 has a comprehensive security incident response plan in place. In the event of a data breach involving members' personal data, our security team will respond within 24 hours to contain the incident. Affected members will be notified within 72 hours, in line with data protection best practices. We will also report significant incidents to the relevant authorities in Malaysia as required under PDPA 2010.

Yes, you may request the deletion of your personal data by submitting a written request to privacy@harta138.ws. However, there are exceptions where harta138 is legally required to retain data for a specified period — for example, financial transaction records must be kept for 7 years under Malaysian law. Data not subject to any legal retention requirement will be deleted or anonymised within 30 business days of the request being received and verified.

Harta138 does not store credit or debit card details directly. For payments made via FPX or other Malaysian banking methods, transactions are processed directly through a licensed, PCI-DSS certified payment gateway — harta138 receives only a transaction confirmation, not the card details themselves. For digital wallet methods such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, all processing takes place entirely within their respective secure ecosystems.

Other Harta138 Policies & Guidelines

Read other important documents related to the responsible use of the harta138 platform

Your Data Is Safe. Join Harta138 with Confidence.

Data privacy and security are harta138's highest priorities. Register for a free account today and enjoy a safe, transparent, and responsible betting experience alongside more than 500,000 Malaysian members.

✓ 256-bit SSL Encryption ✓ PDPA 2010 Compliant ✓ No Data Selling ✓ 24/7 BM Support

By registering, you agree to harta138's Privacy Policy and Terms & Conditions · Age 18+

Bahasa Melayu