Official Data Protection

Privacy Policy Mahjong138 – We Protect Your Data the Way We Protect Ourselves

Player trust is our most valuable asset. This document explains exactly how mahjong138 collect, use, store, and protect your personal information in accordance with industry best practices and Malaysian law.

Last Updated: 1 January 2026 PDPA 2010 Compliant

Mahjong138's Data Protection Commitment

Six core pillars that keep your personal data safe and respected at all times

🔐
256-bit SSL Encryption

All data transmitted between your device and mahjong138's servers is protected by 256-bit SSL encryption – the same standard used by Malaysia's major banks.

🇲🇾
PDPA 2010 Compliance

Mahjong138's privacy policy is fully drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are respected and upheld.

🚫
No Data Selling

Mahjong138 has never and will never sell, rent, or commercialise players' personal data to third parties for marketing or any other purpose without consent.

🗂️
Minimal Data Retention

We retain only the data strictly necessary for platform operations and legal compliance. Data that is no longer required is securely deleted in accordance with standard procedures.

👁️
Full Transparency

We are fully transparent about what data we collect, why we need it, and how it is used. There is no hidden data collection or use beyond what has been disclosed.

You're in Control

Mahjong138 players have the right to access, correct, or request deletion of their personal data. You may also withdraw marketing consent at any time.


Important Note: This Privacy Policy describes our data collection and processing practices mahjong138 for all players in Malaysia. By registering or using our platform, you agree to this Privacy Policy. Please read it carefully – it protects your rights.

Mahjong138 understands that personal information is both sensitive and valuable. As an online casino platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and are committed to ensuring that every piece of information you entrust to us is handled with care, security, and responsibility.

In today's digital world, data breaches and misuse of personal information are serious concerns. mahjong138 takes a proactive approach – not merely complying with the law, but genuinely safeguarding your privacy as a core value. Every system, every process, and every decision involving player data is considered through the lens of security and privacy first.

1

Personal Information We Collect

Mahjong138 only collects information necessary to deliver platform services, meet legal requirements, and ensure the best experience for every player. We do not collect data that is irrelevant or unnecessary.

Data Category Type of Information Purpose
Identity Data Full name, date of birth, identification card number Age & identity verification (KYC)
Contact Details Malaysian phone number, email address OTP verification, account notifications
Financial Data Bank account/e-wallet number, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, web browser, OS Security & fraud prevention
Game Data Betting history, games played, session duration Responsible gaming records & support
Communication Data Live chat records, support emails, complaints Issue resolution & service improvement

Passive Collection: Some data (such as IP address and device type) is collected automatically when you visit the mahjong138 platform. This data is used solely for security purposes and to optimise your experience.

2

How We Use Your Information

Data collected by mahjong138 used exclusively for the following purposes. We do not use your data for any undisclosed purpose without first obtaining your consent.

Identity Verification & KYC
Identity data is used to verify that you meet the age requirement (18+) and to fulfil the KYC (Know Your Customer) obligations mandated for financial platforms. This protects you and helps prevent fraud.
Financial Transaction Processing
Financial information is used to securely process deposits (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) and withdrawals. Bank account numbers are stored in encrypted format and are not accessible to general staff.
Customer Support
Account records and game history allow the mahjong138 support team to resolve issues quickly and accurately, so you never have to explain yourself from scratch each time.
Security & Fraud Prevention
Technical data such as IP addresses and login patterns are analysed to detect suspicious activity, unauthorised access attempts, and fraud before they affect your account.
Responsible Gaming
Game history is used to monitor play patterns and identify players who may benefit from our Responsible Gaming programme – always in the best interest of our players.
Marketing Communications (With Consent)
If you have given consent, we may send you promotional information such as Hari Raya bonuses or special mahjong138 offers. You may unsubscribe at any time.
3

Data Security & Storage

Mahjong138 makes serious investments in security infrastructure to ensure your personal data is always protected. Our security systems are designed in multiple layers – if one layer is compromised, the next continues to safeguard your data.

  • Encryption in Transit: All communications between your device and mahjong138's servers are protected with 256-bit SSL/TLS encryption. This means your data cannot be read even if intercepted in transit.
  • Stored Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted format that cannot be read without the appropriate encryption key.
  • Strict Access Controls: Only staff who require access for specific tasks are permitted to view certain data. All access is logged and monitored.
  • Two-Factor Authentication (2FA): Our internal systems use 2FA for all staff access to databases containing player data.
  • Regular Security Audits: mahjong138's security infrastructure is regularly audited by independent third parties to identify and address any vulnerabilities.
  • Retention Period: Active player data is retained for as long as the account remains active. Following account closure, core data is kept for 7 years in accordance with Malaysian legal requirements, after which it is securely deleted.

While we take all reasonable security measures, no digital system is 100% risk-free. You are responsible for keeping your mahjong138 account password and login credentials secure.

4

Data Sharing with Third Parties

Mahjong138 does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may need to share information with trusted parties:

  • Payment Processors: Information required to process transactions is shared with payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and the relevant FPX banks. They are bound by strict confidentiality agreements.
  • Technical Service Providers: Server providers, security systems, and analytics tools may require limited access to technical data (not sensitive personal data) in order to carry out their functions.
  • Legal Authorities: Mahjong138 will disclose the necessary information when required by court order, official investigation, or lawful request from Malaysian authorities.
  • Game Providers: Game data required to resolve disputes or verify winnings may be shared with the relevant game provider, subject to confidentiality agreements.

Our Commitment: In all data-sharing arrangements, mahjong138 ensures that recipients are bound by confidentiality and security obligations equivalent to or stricter than our own policy.

5

Your Rights as a Mahjong138 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mahjong138's commitment to privacy, you have the following rights regarding your personal data:

👁️
Right to Access
Request a copy of your personal data held by us at any time.
✏️
Right to Rectification
Correct any inaccurate or incomplete information in your profile.
🗑️
Right to Erasure
Request data deletion, subject to legal retention requirements.
🚫
Right to Object
Object to the processing of your data for marketing or certain other purposes.
📦
Right to Portability
Receive your data in a machine-readable format for portability.
⏸️
Right to Restriction of Processing
Restrict the processing of your data under certain circumstances while an investigation is ongoing.

To exercise any of the rights above, contact our privacy team by email at support@mahjong138.click or via live chat on the platform. We will process your request within 30 business days.

6

Cookies & Tracking Technologies

The mahjong138 platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for our players.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of parts of the platform. Essential cookies cannot be disabled as they are required for core login and security functions.

7

Child Protection

Mahjong138 is a platform for users aged 18 and above only. We do not knowingly collect any personal information from individuals under the age of 18. Should we discover that a minor's information has been collected inadvertently, we will promptly delete that information and close the associated account.

Parents or guardians who suspect a minor in their care has registered or used the mahjong138 platform are advised to contact us immediately at support@mahjong138.click. We will take prompt action to address the situation.

8

Changes to This Privacy Policy

Mahjong138 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. Any material changes will be communicated via:

  • A prominent notice on the mahjong138 platform homepage for a minimum of 30 days
  • In-account notifications for logged-in members
  • Email to your registered address for significant policy changes

The date of the most recent update is always displayed at the top of this document. Continued use of the mahjong138 platform after any changes are published constitutes acceptance of the updated policy.

9

Contact Us – Privacy Officer

For any enquiries, requests, or complaints regarding this Privacy Policy and the handling of your personal data by mahjong138, please contact us via:

Email
support@mahjong138.click
Live Chat
In-platform – 24/7
Response Time
Within 30 business days

If you are dissatisfied with our response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) in accordance with the procedures set out under PDPA 2010.


🔐

Your Data, Your Rights – Mahjong138 Respects Both

Trust is the foundation of our relationship with our players. Every piece of information you share with mahjong138 is handled with the utmost responsibility. If you have any privacy concerns, our team is here to help 24/7.

256-bit SSL PDPA 2010 No Data Selling
Responsible Gaming

A Safe, Transparent & Fair Platform

Your privacy and data security are our top priority. Register with mahjong138 and enjoy a safe gaming experience with easy deposits via Touch 'n Go, DuitNow, or GrabPay.

Your data is protected by 256-bit SSL. Players must be 18+.

Bahasa Melayu