Privacy Policy binus138 – Our Commitment to Protecting the Personal Data of Malaysian Members

This Privacy Policy is published by the operator of the binus138 platform ("we", "binus138") and applies to all users who access the binus138.pro website, the iOS and Android mobile apps, and all services provided by our platform.

We understand that entrusting your personal data to any online platform is a decision that should never be taken lightly. That is why binus138 makes data protection one of the core pillars of how we operate — not merely to satisfy legal requirements, but because we genuinely value the trust you place in us.

This document clearly explains what data we collect, why we need it, who can access it, how long it is retained, and what rights you have as the data owner. If any section is unclear, the binus138 support team is ready to help via live chat.

Binus138 only collects data necessary to provide services, ensure account security, process financial transactions, and meet legal requirements. Below are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views. Financial data we retain is stored in partially masked form (for example, bank account numbers display only the last four digits) — full credit or debit card numbers are never stored in our systems.

Every piece of data we collect has a clear purpose and will not be used for anything else without your consent. Below are the primary purposes of data processing at binus138:

• Account Management: Registers, verifies identity (KYC) and manages member accounts securely.
• Transaction Processing: Processes deposits, withdrawals and all other financial transactions accurately and securely.
• Security and Fraud Prevention: Detects suspicious activity, prevents unauthorized access and protects your account from misuse.
• Legal Compliance: Fulfills KYC, AML (Anti-Money Laundering) requirements and reporting obligations to the relevant authorities.
• Customer Support: Provides relevant and personalized assistance when you contact the binus138 support team.
• Service Improvement: Analyzes usage patterns in aggregate (not individually) to improve the user experience.
• Communications: Sends important notices related to your account, changes to terms, or security alerts.

Binus138 does not sell members' personal data to any party. However, there are situations where we need to share data with certain parties in order to deliver our services effectively:

• Payment Providers: DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and partner banks receive the information required to process transactions. They are bound by their own privacy policies and data protection agreements with binus138.
• Game Providers: Pragmatic Play, PG Soft and other providers may receive game session IDs for the purpose of resolving technical disputes — no personally identifiable information is shared.
• Authorities and Law Enforcement: binus138 will disclose data when required by a valid court order, regulatory directive, or applicable legal obligation.
• Infrastructure Service Providers: Cloud server providers, cybersecurity services and analytics systems used internally — all subject to strict confidentiality agreements.

Member personal data is stored on secure servers with multi-layered protection. binus138 uses cloud infrastructure that meets ISO/IEC 27001 standards for information security management.

Data Retention Period:

• Active account data: For the duration of account activity plus five (5) years after account closure, in line with AML compliance requirements.
• Financial transaction records: Seven (7) years as required by Malaysian financial regulations.
• Support communication logs: Two (2) years from the date of the last interaction.
• Analytics data (aggregated, non-personal): Retained indefinitely as it contains no individually identifiable information.

Technical Security Measures:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data stored at rest
• Two-factor authentication (2FA) for internal administrative access
• 24/7 security monitoring and intrusion detection system (IDS)
• Regular penetration testing by independent security experts
• Automatic data backup with full encryption

The binus138 website and app use cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyze usage patterns in aggregate.

Types of Cookies Used:

• Essential Cookies (Required): Required for core platform functions such as login authentication and session security. Cannot be disabled.
• User Preference Cookies: Stores your preferences such as language, theme and display settings. Can be disabled without affecting core functionality.
• Analytics Cookies: Collects usage data in aggregate form to help us understand how users interact with the platform. This data does not contain information that directly identifies any individual.
• Security Cookies: Helps detect unauthorized access attempts and suspicious activity.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect some functionality on the binus138 platform. A cookie notice will be displayed on your first visit to the binus138 website.

As a binus138 member and owner of your personal data, you have certain rights protected under Malaysia's Personal Data Protection Act 2010. We respect these rights and make it easy for you to exercise them.

Binus138 is an entertainment platform that strictly enforces a minimum age requirement of 18 years. We do not accept registrations from individuals under 18 and do not knowingly collect personal data from minors.

Our KYC process is specifically designed to verify the age of applicants before an account is fully activated. Should we discover that a minor's data has been collected without our knowledge — for example through registration using false information — the account will be closed immediately and the data deleted.

Binus138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. All amendments will be published on this page with a clear effective date.

For material amendments — those that significantly change how we use or protect your data — we will notify members via their registered email or an in-platform notification at least 14 days before the amendment takes effect.

Continued use of the binus138 platform after the effective date of any amendment is considered your acceptance of the updated policy. You are encouraged to review this page periodically to stay informed of how we manage your data.

If you have any questions, concerns, or complaints regarding how binus138 handles your personal data, our team is ready to assist. We take every privacy enquiry seriously and strive to provide a thorough and satisfactory response.

For general enquiries about your account and personal data, contact binus138 customer support via live chat within the platform — available 24 hours a day, seven days a week in both Bahasa Melayu and English.

For formal complaints regarding privacy breaches or official data rights requests, you may contact the binus138 Data Protection Officer via our official support email. We will send an acknowledgement within 48 hours and a full response within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the regulatory body responsible for enforcing PDPA 2010.