Reference

How mr138bet Looks After Your Personal Data

When you open an account with us, we collect only the data we need to run your account, process your payments and keep your information secure.

Account data handled securelyLocal e-wallet payment data coveredYour access and correction rights explainedCookies and device data disclosedContact path for data requests provided
mr138bet How mr138bet Looks After Your Personal Data
DATA REQUEST CHANNELS

How to Reach Us About Your Privacy

If you want to access your account data, correct something on file, or ask us to remove records you believe we no longer need, our support team handles these requests directly. Reach us through live chat on the site, by email, or via our account help desk — and we will confirm receipt and respond within a reasonable timeframe. Players in Petaling Jaya and across Malaysia use the same contact paths.

Live Chat Start a chat session from the account page. Raise your data request directly with our support team and we will log it straight away.
Email Support Send your data access or correction request by email. Include your registered account name so we can locate your records quickly.
Account Help Desk Log into your account and use the help desk form under account settings to submit a formal data request or flag a data concern.
DATA HANDLING PRACTICES

Four Ways We Protect and Manage Your Data

We approach data handling through four consistent practices: limiting what we collect, securing what we hold, being transparent about how we use it, and giving you a clear path to act on your rights. These are not abstract commitments — they are built into how your account, your payment flow and our support team actually operate.

Cookies and Session Data

We use session cookies to keep you logged in and analytics cookies to see which parts of the lobby you visit. You can manage cookie preferences through your browser settings at any time.

Account Security and Access

Your account password is stored in hashed form — we cannot read it. Login attempts from unrecognised devices trigger an OTP verification step sent to your registered contact.

Data Retention and Removal

We keep active account data for as long as your account is open. After closure, records are held only as long as needed for reconciliation, then deleted on a rolling schedule.

Payment Data Boundaries

Touch 'n Go eWallet, Boost and GrabPay transaction logs are used only for account reconciliation and dispute resolution. They are never passed to advertising or analytics partners.

Common Questions About Your Privacy on mr138bet

These questions cover what we get asked most often about account data, payment records and how to exercise your rights. If your question is not here, use the live chat or email path listed above.

We collect your name, email address and login credentials at registration. Device data and session identifiers are logged automatically when you access the platform from any browser or mobile device.

We record transaction reference numbers tied to Touch 'n Go eWallet, Boost and GrabPay transfers for reconciliation only. Your full e-wallet credentials and PINs are never stored on our servers.

Submit a data access request through live chat, by email, or via the help desk form in your account settings. We will confirm your identity and respond with the relevant records within a reasonable timeframe.

Yes. You can request a correction or deletion at any point. We will action it where no legal or reconciliation obligation requires us to keep the record, and we will let you know the outcome.

We share data only with payment processors — and only the fields needed to complete your transaction. We do not sell account data or share it with advertising or marketing partners outside the platform.

Session cookies keep your account active during a visit. Analytics cookies help us see which sections of the lobby are used most. You can block or delete cookies through your browser settings at any time without losing your account.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.