Privacy Policy giga138 – Malaysia Player Data Protection

Giga138 takes the privacy and data security of all our members seriously. This document clearly explains what data we collect, how it is used, and how we protect it.

Updated: January 2026 256-bit SSL Applicable in Malaysia Data Secure

Important Notice: This Privacy Policy describes giga138's personal data collection and management practices for the platform accessible at giga138.best. By registering for or using the giga138 platform, you agree to the collection and use of your information as described in this document. Please read it carefully before using our services.

1

Introduction & Scope of Privacy Policy

Giga138 ("we", "platform", "Company") is committed to protecting the privacy and security of the personal data of all users and members of our platform. This Privacy Policy ("Policy") sets out in detail how giga138 collects, stores, uses, discloses, and protects your personal information when you use our online casino and Sports Betting platform.

This policy applies to all individuals who access or use the giga138 platform, including registered players, website visitors, and anyone who contacts our customer support team. It covers all your interactions with giga138 — from account registration and game activity to financial transactions using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, through to communications with our team.

Core Principles: giga138 only collects data that is necessary to provide our services, maintain platform security, and comply with legal requirements. We do not sell your personal data to any third party for marketing purposes.

By completing your account registration or continuing to use the giga138 platform, you confirm that you have read and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2

Types of Personal Data We Collect

Giga138 collects your personal data through several means — directly when you register and use the platform, automatically through tracking technologies, and in some cases from legitimate third-party sources. The following are the types of data we collect:

Data You Provide Directly:

  • Identity Information: Full name as per identity card (MyKad), date of birth, identity card number (for the KYC process), gender, and Malaysian citizenship.
  • Contact Information: An active Malaysian mobile number, email address, and residential address.
  • Financial Information: Payment method details you have registered (your Touch 'n Go eWallet number, GrabPay, ShopeePay, Boost, DuitNow account, or FPX/Maybank2u/CIMB Clicks account number), along with your deposit and withdrawal history in Malaysian Ringgit (RM).
  • Account Information: Your username, encrypted password, and account preferences.
  • Verification Documents: A copy of your MyKad or other valid Malaysian identification document submitted during the KYC (Know Your Customer) process.

Automatically Collected Data:

  • Technical Data: IP address, browser type, device operating system, screen resolution, and device information.
  • Game Activity Data: The type of game played (slots, Live Casino, table games, poker, Sports Betting), bet amounts, game results, session duration, and bonus transaction history.
  • Log Data: Access timestamps, pages visited, links clicked, and navigation flow within the giga138 platform.
  • Location Data: General location based on IP address for the purpose of verifying that you are accessing from Malaysia.

Summary of Data Categories & Collection Purposes

Data Category Example Primary Purpose Legal Basis
Identity Full name, MyKad number, date of birth Identity Verification (KYC) Legal obligation
Contact Phone number, email, address Communications & account notifications Contract fulfilment
Finance Payment methods, RM transaction history Processing deposits & withdrawals Contract fulfilment
Gaming Activity Betting, slots, live casino Services & responsible gambling Legitimate interest
Technical IP, device, browser Security & fraud detection Legitimate interest
Cookies Session cookies, preference cookies User experience & analytics Consent
3

How giga138 Uses Your Data

The personal data we collect is used solely for legitimate purposes directly relevant to the provision of giga138's platform services. The following are the primary purposes for which your data is used:

  • Platform Service Provision: Managing and maintaining your account, processing deposits and withdrawals in MYR, providing access to all games and platform features, and administering the VIP Rewards programme and any bonuses you are eligible for.
  • Identity Verification (KYC): Verifying that you are the legitimate individual you claim to be, that you meet the minimum age requirement of 21 years, and that you comply with anti-money laundering (AML) legal requirements.
  • Account Security & Fraud Detection: Monitoring account activity to detect and prevent unauthorised access, fraud, multiple account usage, and suspicious behaviour that could compromise the security of the platform and other members.
  • Communications: Sending important account notifications, security updates, notices regarding changes to our terms or policies, and promotional information to members who have opted in to receive them.
  • Responsible Gambling: Monitoring gaming activity patterns to identify potential problem gambling and reach out to members who may need support, as well as enforcing limits set by members themselves.
  • Platform Improvements: Analysing usage data in aggregate and anonymised form to understand how players use the platform and where product improvements are needed.
  • Legal Compliance: To fulfil reporting and compliance obligations to the relevant authorities where required by applicable law.

Giga138 will not use your personal data for purposes unrelated to the provision of platform services without first notifying you and obtaining your explicit consent where required.

4

Data Sharing with Third Parties

Giga138 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in operating the platform, we need to share certain data with a limited set of third-party categories in the following situations:

  • Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, we are required to share the minimum necessary transaction information with those payment service providers. Data shared is limited strictly to what is needed to complete the transaction.
  • Game Providers: Third-party game providers that supply game titles on the giga138 platform may receive the minimum technical data required to ensure the games function correctly. They do not receive your full identity or financial information.
  • Infrastructure Service Provider: Companies that provide cloud computing, cybersecurity, and technical infrastructure services required to operate the giga138 platform. All such providers are required to comply with strict data protection standards.
  • Legal Authorities: giga138 will disclose personal data to the relevant authorities when required to do so by a valid court order, Malaysian law, or in the context of an investigation into fraud, money laundering, or other financial crimes.
Data Processing Agreement: All third parties that receive data from giga138 are required to sign a strict data processing agreement that prohibits use of the data for any purpose beyond what has been specified, and mandates data protection standards equivalent to those of giga138.
5

Data Security Measures at giga138

The security of giga138 members' personal and financial data is a priority we never compromise on. We continually invest in the latest security technologies and procedures to ensure your data remains protected at all times.

  • 256-bit SSL Encryption: All communications between your browser or app and giga138's servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's major banking institutions, including Maybank and CIMB. No data is transmitted in plain text that could be intercepted.
  • Data Encryption at Rest: Sensitive data stored in giga138's databases — including identity information, passwords (stored as irreversible hashes) and financial details — is encrypted using the latest data encryption standards.
  • Internal Access Controls: Access to members' personal data within giga138 is restricted to staff who require it to perform their duties only. All access is automatically logged and monitored.
  • Two-Factor Authentication: giga138 uses two-factor authentication for member account access and an additional security layer for financial transactions to prevent unauthorised access.
  • 24/7 Security Monitoring: giga138's automated security monitoring system operates around the clock to detect potential intrusion attempts, abnormal activity, and other cybersecurity threats.
  • Regular Penetration Testing: giga138 conducts regular security testing carried out by independent security experts to identify and address system vulnerabilities before they can be exploited.

While giga138 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You are also responsible for keeping your account password secure and for notifying us immediately if you suspect any unauthorised activity on your account.

256-bit SSL
Encrypted Data
2FA Active
Hashed Passwords
24/7 Monitoring
Regular Testing
6

Cookies & Tracking Technologies

The giga138 platform uses cookies and similar tracking technologies to enhance your experience, ensure platform features function correctly, and understand how players use our platform. The following are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the giga138 platform to function properly. They include login session cookies, security cookies, and cookies that enable smooth transaction processing. You cannot opt out of these cookies without affecting platform functionality.
  • Optional Cookies (Functional): These cookies save your preferences — such as display language, account settings, and game preferences — so you do not have to reconfigure them each time you log in to giga138.
  • Analytics Cookies: These cookies collect information about how players use the giga138 platform — which pages are visited most often, which games are most popular, and where players encounter issues. This data is used in aggregate and anonymised form to improve the platform.
  • Session Cookies: Session cookies that expire when you close your browser, used to maintain the continuity of your gaming session.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the giga138 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7

Your Rights Regarding Personal Data

Giga138 respects your rights regarding the personal data we hold. Below are the rights available to you and how to exercise them:

  • Right of Access: You have the right to obtain a copy of the personal data we hold about you. You can view most of this information directly in the account section of the giga138 platform, or request a full report by emailing support@giga138.best.
  • Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction. You can update certain details directly in your account or contact our support team.
  • Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data. However, this right is subject to our legal obligations to retain certain records — particularly those relating to financial transactions and KYC records — for periods prescribed by law.
  • Right to Restriction of Processing: You have the right to request that we restrict how we process your data in certain circumstances — for example, while we are reviewing a dispute regarding the accuracy of your data.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may unsubscribe from giga138 marketing communications via the unsubscribe link in any email or by contacting our team.
  • Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for your own use or to transfer to another service provider.

To exercise any of the rights above, please contact the giga138 privacy team by email at support@giga138.best stating the right you wish to exercise and your account details. We will respond within 14 business days.

8

Data Retention & Deletion

Giga138 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law.

  • Active Account Data: For as long as your account remains active with giga138, we retain all account information necessary to provide our services to you.
  • Financial Records: Records of all financial transactions — deposits, withdrawals, and bonus activity — are retained for a minimum of 7 years following each transaction, in line with Malaysia's financial and anti-money laundering legal requirements.
  • KYC Documents: Identity verification documents such as copies of MyKad are retained for a minimum of 5 years after account closure or after the last transaction, whichever is later.
  • Activity Logs: Technical logs and gaming activity logs are retained for 2 years for security and dispute resolution purposes.
  • Support Communication: Communication records with the customer support team are retained for 3 years.

Once the relevant retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. The deletion process follows strict security procedures to ensure the data cannot be recovered.

9

Changes to This Privacy Policy

Giga138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or improvements to how we operate the platform.

If we make any material changes to how we collect, use, or protect your personal data, we will notify you through:

  • An in-platform notification on giga138 the next time you log in.
  • An email to the address you registered with, at least 7 days before the changes take effect.
  • Updates will be reflected in the "Last Updated" date at the top of this page.

Your continued use of the giga138 platform after any Privacy Policy changes take effect will be considered your acceptance of those changes. If you do not agree with the changes, you have the right to close your account before they take effect by contacting our support team.

Current Version: This Privacy Policy is effective from January 2026. This is the version currently applicable to all users of the giga138 platform.
10

Contact Us About Data Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how giga138 handles your personal data, we encourage you to contact us directly.

  • Privacy Email: support@giga138.best – Please include "Data Privacy Enquiry" in your email subject line along with your account number for faster processing.
  • Live Chat: Reach the giga138 support team directly via the live chat button within the platform, available 24 hours a day, 7 days a week in Bahasa Melayu.
  • Response Time: We aim to respond to all privacy-related enquiries within 14 working days. Urgent security matters will be prioritised and responded to more promptly.

Giga138 takes every privacy and data enquiry seriously. We are committed to providing a clear, transparent, and helpful response to every enquiry we receive.

Why Data Privacy Matters at giga138

When you choose giga138 as your online entertainment platform, you are trusting us not only with your money, but also with your most sensitive personal information — your name, ID number, payment details, and gaming activity records. giga138 takes this trust seriously, which is why we continually invest in the systems, processes, and organisational culture that place data protection as a top priority, not an afterthought.

Malaysian players on the giga138 platform come from all walks of life — from casual slots fans who play on weekends, to serious Live Casino players who enjoy baccarat and roulette, football enthusiasts who follow every Malaysia Super League and EPL match, and cricket fans who track every ball in the IPL. All of these members entrust giga138 with their personal information, and we take that responsibility seriously, protecting that trust in ways that are tangible and verifiable.

For Malaysian users, one of the most critical aspects of privacy is the security of payment information. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, your transaction details are protected with 256-bit SSL encryption, ensuring no unauthorised third party can intercept or access that information. giga138 does not store your full bank card number or e-wallet password — we only retain the authentication token required to process future transactions.

Regarding the use of data for responsible gambling, giga138 uses your playing activity data not to exploit you, but to protect you. Our system is designed to detect playing patterns that may indicate a gambling problem — such as a sudden increase in playing frequency, bets that exceed your usual budget, or unusual playing hours. When such patterns are detected, our team may reach out to you personally to offer information and support, or the system will remind you of the spending limits you have set for yourself.

Giga138 is also committed to the principle of data minimisation — we only collect data that is genuinely necessary to provide our services. This means we do not gather information simply because it might be useful in the future. Every category of data we collect has a defined purpose and a set retention period. When data is no longer needed, it is deleted or anonymised in accordance with strict procedures.

For players who have just registered with giga138, the KYC (Know Your Customer) process may seem like a burdensome procedure at first. In reality, this identity verification process exists to protect you — it ensures that no one else can use your identity to open an account or withdraw funds on your behalf. We handle all KYC documents with the highest level of security and delete them once the legally mandated retention period has expired.

Ultimately, giga138 believes that transparency is the foundation of trust. That is why this Privacy Policy is written in plain, easy-to-understand language — free of confusing legal jargon — so every Malaysian member can clearly understand how their data is handled. If you have any questions after reading this Privacy Policy, our team is available via 24/7 live chat.

Your Rights as a giga138 Member

You have full control over your personal data — here is how to exercise it

Data Access Rights

You may request a complete copy of all personal data giga138 holds about you at any time. Much of this information is accessible directly through your account, or you can request a full report via email.

Right to Rectification

If any of your information on giga138 is inaccurate or out of date, you have the right to request an immediate correction. Updates to your name, phone number, or address can be made through the account section or via customer support.

Right to Erasure

You may request the deletion of your personal data in certain circumstances. Such requests are subject to giga138's legal obligations to retain financial and KYC records for prescribed periods.

Right to Object to Marketing

You may opt out of receiving marketing communications from giga138 at any time by using the unsubscribe link in any email or by contacting our support team. All such requests are actioned immediately.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for your own use or to transfer to another service provider of your choice.

Right to Restrict Processing

In certain circumstances — for example, while a dispute regarding the accuracy of your data is being reviewed — you have the right to request that giga138 restrict how your data is processed until the issue is resolved.

Giga138's Privacy Commitment to Malaysian Players

Six ways giga138 keeps your data safe and protected at all times

End-to-End 256-bit SSL Encryption

Every bit of data transmitted between your device and giga138's servers is encrypted using 256-bit SSL protocol — the highest security standard available for digital platforms. This means that even if someone were to intercept your internet traffic, they would be unable to read your information.

No Sale of Data to Third Parties

Giga138 has never and will never sell, rent, or trade your personal data to any third party for their marketing purposes. Your data is used solely to provide platform services and ensure the security of your account.

Strict Internal Access Controls

Access to members' personal data within giga138 is restricted to staff who genuinely need it to perform their duties. All access is logged, monitored, and audited on a regular basis. Internal access violations are treated as serious matters and addressed promptly.

A Clear Policy in Plain Language

Giga138 believes you deserve to know exactly how your data is handled, without having to wade through complex legal documents. Our Privacy Policy is written in plain, straightforward language that all Malaysian players can easily understand.

Data Minimisation Principle

Giga138 only collects data that is strictly necessary to provide our services. We do not collect excessive information or retain data longer than required. When data is no longer needed, it is securely deleted or anonymised.

24/7 Privacy Support in RM

Giga138's Bahasa Malaysia-speaking support team is available to assist with any questions or concerns regarding your data privacy. Reach us via live chat at any time, or email support@giga138.best for a response within 14 business days.

FAQ – giga138 Privacy Policy

Further clarification on the data privacy questions most frequently asked by Malaysian players

No. giga138 does not store your full bank card number, PIN, or e-wallet password. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, you are redirected to the payment provider's secure interface to complete the transaction. giga138 only receives an authentication token and the minimum transaction details required to record your deposit. This means that even in the highly unlikely event of a data breach at giga138, your actual payment information would not be exposed — because we never held it in the first place.

You may request deletion of your data, subject to giga138's legal obligations. Financial records (deposit and withdrawal transactions in RM) must be retained for a minimum of 7 years under Malaysian financial regulations and anti-money laundering policy. KYC documents such as MyKad copies must be retained for a minimum of 5 years. Other data, such as technical logs and support communication records, have shorter retention periods. Once these periods expire, all your data will be permanently deleted or anonymised. Please contact support@giga138.best to understand exactly which data can and cannot be deleted based on your account situation.

giga138 sends two types of communications. The first is mandatory transactional communications — deposit notifications, withdrawal confirmations, account security alerts, important terms updates, and VIP points notifications. These are necessary for the service to function and cannot be opted out of without affecting your account functionality. The second is marketing communications — the latest promotional offers, exclusive VIP bonuses, and special deals tied to Malaysian festivities. You may opt out of these marketing communications at any time by clicking the "Unsubscribe" link in any marketing email from giga138, or by informing our support team via live chat. Unsubscribe requests are processed within 48 hours.

If giga138 is involved in any business transaction such as a merger, acquisition, or asset sale, members' personal data may be transferred as part of those business assets. In such circumstances, however, giga138 is committed to providing all members with reasonable notice before their personal data becomes subject to a different Privacy Policy. The receiving company will be required to protect members' personal data to a standard at least equivalent to that set out in this Privacy Policy. You will be given the option to request deletion of your data before the transfer takes place, subject to applicable legal retention obligations.
giga138 Related Policy Links

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy giga138 for a full overview of your rights and responsibilities as a platform member. In the event of any conflict between these documents, the Terms & Conditions shall prevail on all contractual matters, while this Privacy Policy shall govern all matters relating to personal data.

Play with Confidence at giga138 — Your Data Is Safe

With 256-bit SSL protection, no third-party data sales, and 24/7 privacy support in Bahasa Malaysia, giga138 is a platform you can trust completely.

Bahasa Melayu