Rupiah138 Privacy Policy — Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by rupiah138 ("we", "platform", or "service") to inform all users and members ("you") of how we collect, process, store, use, and protect your personal data when you use the rupiah138 platform and services.

Rupiah138 is fully committed to protecting your privacy and complying with all requirements set out under Malaysia's Personal Data Protection Act 2010 (PDPA). We believe every member has the right to know clearly what data we collect about them, why it is collected, how it is used, and what choices are available to them regarding their personal data.

This policy applies to all your interactions with rupiah138 — from your first visit to our website, through the account registration process, to your daily betting activity, and all deposit and withdrawal transactions made via Touch 'n Go, DuitNow, GrabPay, FPX, Boost, or ShopeePay. By using rupiah138 services, you confirm that you have read and understood this Privacy Policy.

Rupiah138 collects several categories of personal data necessary to provide safe and regulated betting services. The following is a complete list of data we may collect:

Personal Identification Data:

• Full name as shown on your MyKad identity card
• Malaysian identity card number (MyKad) for KYC verification
• Date of birth for 21-year age verification
• An active Malaysian phone number
• A valid, active email address
• Current residential address in Malaysia

Financial and Transaction Data:

• Payment method details used — Touch 'n Go, DuitNow, GrabPay, FPX, Boost, ShopeePay
• Records of deposits and withdrawals in Malaysian Ringgit (RM)
• Betting history and winnings within the platform
• Account balance and fund movements

Technical and Usage Data:

• IP address and device location information
• Device type, operating system, and web browser version
• Activity logs — login times, pages visited, features used
• Cookie data and session tokens for a smoother experience

Rupiah138 collects your personal data through several different channels throughout your interactions with our platform:

• Account Registration — data you enter directly when registering as a new rupiah138 member
• KYC Process — identity verification documents you have submitted, such as a copy of your MyKad and proof of address
• Financial Transactions — information generated during deposit and withdrawal processes via Malaysian payment methods
• Platform Activity — betting records, matches followed, markets selected, and features used
• Customer Support Communications — chat conversations, emails, or any other communications with the rupiah138 support team
• Cookies & Web Technologies — data collected automatically via cookies, tracking pixels, and server logs

In all cases, we only collect data that is genuinely necessary for the stated purposes. We do not collect excessive data or data without a clear justification in the context of the services we provide to rupiah138 members.

Rupiah138 uses the personal data collected for legitimate and specific purposes. We do not use your data for any purpose beyond those stated below without obtaining fresh consent from you:

• Account Management — to create, verify, maintain, and protect your rupiah138 member account
• Transaction Processing — to securely process deposits and withdrawals in MYR via your chosen payment method
• Identity Verification (KYC) — to verify that each member meets the minimum age requirement of 21 years and any other applicable eligibility criteria
• Service Delivery — to deliver a personalised sports betting, Live Casino, e-sports, and virtual sports experience tailored to your preferences
• Fraud Prevention — to detect and prevent fraudulent activity, money laundering, and platform abuse
• Customer Support — to provide technical assistance and address your enquiries in Malay
• Marketing Communications — to send relevant promotional information and bonuses, subject to your choice to opt in or out of such communications
• Responsible Gaming — to monitor usage patterns and identify players who may need betting management support
• Legal Compliance — to meet our legal obligations in Malaysia and to respond to requests from the relevant authorities

You may opt out of receiving marketing communications from rupiah138 at any time by contacting our customer support or using the unsubscribe option in any email you receive. Opting out of marketing communications will not affect your access to rupiah138's core services.

Rupiah138 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes without your explicit consent. However, in the course of operating our services, there are limited situations where we may need to share certain data with trusted parties:

• Malaysian Payment Providers — data required to process transactions via Touch 'n Go, DuitNow, GrabPay, FPX (Maybank2u/CIMB Clicks), Boost, and ShopeePay. These providers maintain their own privacy policies and comply with Malaysian financial regulations
• Betting Technology Provider — software and odds platform providers supporting rupiah138's technical operations, bound by strict confidentiality agreements
• Malaysian Authorities — where required by law, court order, or a relevant regulatory body in Malaysia
• Fraud Detection Companies — for the purpose of preventing fraud, money laundering, and other illegal activities that threaten the security of our platform and members

In all the data-sharing cases described above, rupiah138 ensures that only the minimum necessary data is shared, and that the receiving party has a legal or contractual obligation to protect that data to an equivalent standard of security.

Protecting the personal data of rupiah138 members is our highest technical and operational priority. We continually invest in security infrastructure to keep your data safe from unauthorized access, disclosure, alteration, or destruction.

The technical security measures we have implemented include:

• 256-bit SSL Encryption — all data transmitted between your device and rupiah138 servers is encrypted using 256-bit TLS/SSL protocols
• Data-at-Rest Encryption — data stored in the rupiah138 database is encrypted even when at rest
• Two-Factor Authentication — 2FA option available to all members for enhanced login security
• Tiered Access Control — rupiah138 staff may only access the data required for their specific duties, with all access logged and audited
• Regular Vulnerability Scanning — rupiah138 systems undergo regular security testing and vulnerability scanning conducted by independent security experts
• Real-Time Monitoring — automated monitoring systems operate 24/7 to detect suspicious activity or unauthorised access attempts

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. In the unlikely event of a security breach that may affect your personal data, rupiah138 is committed to notifying you within the timeframe required by Malaysia's PDPA 2010.

Rupiah138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you across sessions and provide a more personalised, seamless experience.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as secure login and session management. These cookies cannot be disabled as they are essential to your account security
• Performance Cookies — collects information on how you use the rupiah138 platform to help us improve performance and the overall user experience
• Functional Cookies — remembering your preferences and settings such as language choice and betting requirements to make your experience more convenient
• Marketing Cookies — used to display relevant promotions and bonuses to you based on your interests and activity on the platform. These cookies can be disabled through your browser settings

You can manage cookie usage through your web browser settings. Please note that disabling certain cookies may affect the functionality of the rupiah138 platform. Disabling essential cookies, for example, may prevent you from logging in to your account securely.

Rupiah138 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable Malaysian law.

• Active Account Data — retained for as long as your rupiah138 membership account remains active
• Financial Transaction Records — retained for a minimum of 7 years from the transaction date, as required under Malaysian financial law
• KYC Data — retained for a minimum of 5 years after account closure, in line with Malaysia's anti-money laundering requirements
• Activity and Security Logs — typically retained for 2 years for investigation purposes in the event of a security incident
• Customer Support Data — retained for 3 years after your last interaction with our support team

Once the retention period expires, rupiah138 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered. Members may submit data deletion requests, subject to exceptions provided under Malaysian law.

Under Malaysia's Personal Data Protection Act 2010 and our commitment to privacy, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact the rupiah138 customer support team by email at support@rupiah138.run or via 24/7 live chat. We will require identity verification before processing any request related to your personal data to ensure your account remains secure.

Rupiah138 is a platform exclusively for adults aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

Should we discover that we have inadvertently collected data from an individual under the age of 21, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their minor child has registered on rupiah138 are urged to contact us immediately at support@rupiah138.run so that we can take appropriate action promptly.

Rupiah138 may update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements in Malaysia. All changes will be published on this page with a clear updated date.

For material changes — that is, changes that significantly alter how we collect, use, or process your personal data — we will send a notice to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of rupiah138's services.

If you disagree with any material changes to this Privacy Policy, you have the right to close your account and request the deletion of your personal data (subject to legal retention requirements) before the changes take effect. Continued use of the rupiah138 platform after the effective date constitutes acceptance of the amended Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to get in touch. The rupiah138 customer support team is available to assist you in English, 24 hours a day, 7 days a week.

• Privacy Email: support@rupiah138.run — please include "Privacy Enquiry" in your email subject line
• Live Chat: Click the chat icon on the rupiah138 platform — responses within minutes
• Response Time: Email enquiries responded to within 2 business days; data access requests within 21 business days
• Language: All privacy communications are handled in Bahasa Malaysia or English, based on your preference

If you are not satisfied with our response to your privacy query or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPCOM), which enforces the Personal Data Protection Act 2010 in Malaysia.