Mahjong138 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

1Introduction & Scope of This Policy

This Privacy Policy applies to all activities involving the collection and processing of personal data by mahjong138 through our official website at mahjong138.ws, mobile platform, web application, and all our official communication channels.

• This policy applies to all individuals who register an account, visit the website, or interact with the mahjong138 platform in any capacity.
• By using our services, you acknowledge that you have read and understood this policy.
• This policy should be read together with Terms & Conditions mahjong138, which together form the entire agreement between you and us.
• In the event of any conflict between this document and any other policy, this Privacy Policy shall take precedence in all matters relating to personal data.

2Types of Personal Data We Collect

mahjong138 collects several categories of personal data depending on your interactions with our platform. Below is a full breakdown of the data types and the reasons they are collected:

3How Data Is Collected

Your personal data is collected through various means depending on how you interact with the mahjong138 platform. mahjong138:

3.1 Directly from You

• During the new account registration process – name, email, phone number, and other basic details.
• During the Identity Verification (KYC) process — copies of your MyKad, bank statement, or other supporting documents.
• When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, or CIMB Clicks.
• When you reach our customer support team via live chat, email, or WhatsApp.
• When you complete a feedback form, participate in a promotion, or join a contest.

3.2 Automatically

• Technical data is collected automatically when you visit our website via cookies, server logs, and standard tracking technologies.
• Gaming activity data – including games played (baccarat, blackjack, poker, slots, EPL betting, Malaysia Super League), total wagers, and outcomes – is automatically recorded in our system.
• Session information including login time, session duration, and in-platform navigation activity.

4How We Use Your Personal Data

Mahjong138 uses collected personal data solely for legitimate, stated purposes. We do not use your data for any unrelated purpose without your explicit consent:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process required by regulatory authorities.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u/CIMB Clicks), and withdrawals to your account.
• Service Provision: Enables you to play all available games, including Live Casino, Sports Betting, and table games.
• VIP Programme & Bonuses: Calculating and crediting VIP points, cashback, rebates, and related bonuses based on your gameplay activity.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and the use of multiple accounts.
• Customer Support: To help us resolve technical issues, account inquiries, and other support requests more effectively.
• Responsible Gambling: Monitoring gameplay patterns to identify and assist members who may be experiencing gambling-related issues.
• Service Communications: Sending important notifications regarding your account, transactions, changes to our terms, and security updates.
• Marketing Communications (with consent): Sending information about promotions, new bonuses, and exclusive offers — only if you have consented to receive them.
• Analytics & Improvement: Analysing usage patterns to improve the platform, user experience, and game offerings.
• Legal Compliance: Fulfilling legal obligations and the requirements of relevant regulatory bodies.

5Data Sharing & Disclosure

mahjong138 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited circumstances in which data sharing may occur:

5.1 Trusted Service Providers

• Technical infrastructure providers (servers, databases) that help operate our platform.
• Payment processors and financial gateways that handle your deposit and withdrawal transactions.
• Game providers that supply Live Casino, slots, and table game content.
• All third-party service providers are bound by strict confidentiality agreements and may only use data for purposes specified by mahjong138.

5.2 Legal Requirements

• When required by a court order, warrant, or directive from a lawful authority in Malaysia.
• To comply with anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
• In the investigation of fraud or illegal activity involving your account.

6Data Retention & Security Measures

6.1 Where Your Data Is Stored

Member personal data mahjong138 stored in secure data centres with multi-layered physical and digital protection. Access to this data is restricted to authorised personnel only, governed by role-based access control.

6.2 Technical Security Measures

• Encryption in Transit: All data transmitted between your browser and our servers is protected by 256-bit SSL/TLS encryption — the same security standard used by banking institutions.
• Storage Encryption: Sensitive data such as identification card numbers and financial information is stored in encrypted format within our databases.
• 24/7 Monitoring: Our systems are monitored around the clock to detect unauthorised access attempts, cyber attacks, and security anomalies.
• Two-Factor Authentication (2FA): All internal staff access to our customer database requires two-factor authentication.
• Regular Security Audits: Our platform undergoes periodic independent security audits by third parties to identify and address any vulnerabilities.

6.3 Data Retention Period

• Active account data: Retained for the duration the account remains active and for 7 years following account closure (AML legal requirement).
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian accounting and financial legal requirements.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical data and access logs: Retained for 12 months for security and investigation purposes.

7Use of Cookies

The mahjong138.ws website uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

7.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions — login, session management, and security. Cannot be disabled.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences for a better experience.
• Analytics Cookies: Collects anonymised data on how you use the platform to help us improve our services. This data is not linked to your personal identity.
• Performance Cookies: Monitoring the platform's technical performance and detecting errors for faster resolution.

7.2 Cookie Controls

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality – for example, you may be required to log in again each time you open a new browser session. Essential cookies cannot be disabled without impacting core platform functions.

8Your Rights Over Personal Data

As a member mahjong138, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

9Children's Data Protection

mahjong138 maintains a zero-tolerance policy toward participation by underage individuals. Our platform is exclusively for individuals aged 18 and above.

• We do not knowingly collect or process personal data of individuals under the age of 18.
• Should we discover that data belonging to a minor has been collected inadvertently, we will promptly delete that data and close the associated account.
• Parents or guardians who become aware that their child has used our platform without authorisation are asked to contact us immediately at support@mahjong138.ws.
• An age verification process is carried out during registration and may be reinforced by a request for identity verification documents at any time.

10Amendments to the Privacy Policy

• Mahjong138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or new technologies.
• Members will be notified of any material amendments via their registered email or in-platform notification at least 14 days before taking effect.
• The "Last Updated" date at the top of this document will be updated whenever amendments are made.
• Continued use of the platform after the effective date of any amendment constitutes acceptance of the revised policy.
• It is your responsibility to review this page regularly. We recommend doing so at least once every three months.

11Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding how mahjong138 handling your personal data, please contact us through the following channels:

We are committed to responding to all privacy enquiries within 5 business days. For more complex data rights requests, processing may take up to 14 business days.