Official Privacy Policy

Your Privacy Preferences We at daya138

Daya138 is fully committed to protecting the personal information of every member. This privacy policy clearly explains how we collect, use, store and protect your data — with no confusing terms.

Updated: January 2026
256-bit SSL encryption for all data and transactions
Your data is never sold or shared without consent
Secure servers with layered access controls
Full right to request, update or delete your data
Compliance with Malaysian data protection laws
Important Note: By registering and using the daya138 platform, you agree to the privacy policy set out here. Please read it carefully. If you have any concerns, contact us before using our services.
1

Introduction and Scope of Privacy Policy

Welcome to the daya138 Privacy Policy page. We, daya138, take your privacy seriously — not merely to fulfill legal requirements, but because we believe your trust is the foundation of the long-term relationship we are building together.

This privacy policy describes our practices regarding the collection, use, storage, protection and disclosure of personal information you provide when using the daya138 platform — including the website, mobile app and all related services we offer to players in Malaysia.

This document applies to all users of the daya138 platform, whether as a visitor, registered user or active member. By browsing our website or creating an account, you acknowledge that you have read, understood and agreed to this privacy policy in its entirety.

Scope of This Policy
This privacy policy covers all information collected through the daya138.pro website, the daya138 mobile app, email and live chat communications, and our other customer service channels. It does not apply to third-party websites or services that may be linked from our platform.
2

Personal Information We Collect

Daya138 collects your personal information through several channels — whether provided directly by you, collected automatically as you use the platform, or obtained from legitimate sources. Below are full details of the types of information we collect:

Information You Provide Directly

  • Registration information: Full name, date of birth, email address, phone number, and username
  • KYC verification documents: MyKad or passport copy, proof of address (bank statement or utility bill)
  • Financial information: Bank account number, account holder name, and eWallet details for deposit and withdrawal purposes
  • Communications: Live chat message content, emails and feedback you send to our support team

Information Collected Automatically

  • Technical data: IP address, browser type, operating system and device version
  • Usage data: Pages visited, games played, session duration and navigation patterns
  • Transaction data: Deposit, withdrawal, wagering, and wins history
  • Cookies and tracking technology: Session data, language preferences and account settings (see Section 6)
Minimum Data Collection Principle: daya138 only collects information that is strictly necessary to provide our services, meet legal requirements and ensure platform security. We do not collect personal information beyond what is needed.

Data Categories Collected — Summary Table

Data Category Examples of Information Primary Purpose
Identity Name, date of birth, ID number KYC verification, fraud prevention
Contact Email, phone number Communications, account notifications
Financial Bank account, eWallet Processing deposits and withdrawals
Technical IP address, browser, device Security, fraud detection
Transactions Game history, betting Account records, audits, bonuses
Marketing Promotional preferences, campaign responses Personalised offers (with consent)
3

How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. daya138 does not use your data for any purpose unrelated to the provision of our services or applicable legal requirements.

  • Account management: Create, verify and maintain your member account securely
  • Transaction processing: Process deposits, withdrawals and all financial transactions quickly and accurately
  • Identity verification (KYC): Fulfil anti-money laundering and fraud prevention legal requirements
  • Customer service: Answering inquiries, resolving issues, and providing effective technical support
  • Platform security: Detecting and preventing unauthorized access, fraud, money laundering, and other illegal activities
  • Product improvement: Analyse usage patterns to improve user experience and develop new features
  • Marketing communications: Sending offers, promotions, and updates — only to members who have opted in to receive them
  • Legal compliance: Meet reporting and audit obligations required by relevant authorities
Marketing Communications: You may withdraw consent to receive marketing communications at any time by contacting our support team or through your account settings. Withdrawing consent does not affect any data processing that has already taken place.
4

Information Sharing and Disclosure

Daya138 does not sell, rent or trade your personal information to any third party for their own commercial purposes. This is a non-negotiable commitment.

However, in certain limited and lawful circumstances, your information may be shared with the following parties:

Trusted Service Providers

We work with carefully selected third-party service providers to support our platform operations, including game platform providers (Evolution, Pragmatic Play and others), payment processors (FPX, eWallet), cloud service providers and customer support teams. All providers are bound by strict confidentiality agreements and may only use your data for specified purposes.

Legal Requirements

Daya138 may disclose your personal information where required by law, court order, or direction from a competent regulatory authority — including financial crime investigations, money laundering cases, or requests from legitimate law enforcement agencies.

Business Transfer

In the event of a merger, acquisition or sale of company assets, user information may be transferred as part of that transaction. We will notify you in advance and ensure that equivalent privacy protections are maintained by the acquiring party.

Our Guarantee: In all of the above data-sharing situations, we ensure that only the minimum necessary information is shared, and all recipients are subject to data protection obligations equivalent to or stricter than our own standards.
5

Data Security and Protection Measures

Your data security is more than a priority — it is the foundation of trust that underpins the entire daya138 platform. We continuously invest in the latest security infrastructure to keep your information protected at all times.

  • 256-bit SSL/TLS encryption: All data transmitted between your device and daya138 servers is encrypted using banking-standard security protocols
  • Stored data encryption: Sensitive information such as passwords and bank account numbers is stored in encrypted format that cannot be read even by internal staff
  • Layered access controls: Access to user data is restricted on a "need-to-know" basis — only authorised staff with a legitimate business need may access sensitive information.
  • 24/7 Monitoring: Our security system continuously monitors traffic and account activity to detect any anomalies or intrusion attempts.
  • Two-factor authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorized access
  • Regular security audits: Our platform undergoes regular penetration testing and security audits by independent third parties
In the Event of a Data Breach
In the event of a security incident involving your personal data, daya138 is committed to notifying you within a reasonable timeframe via email or an in-platform notice. We will explain the nature of the incident, the data that may have been affected, and the steps being taken to address the situation.
6

Cookies, Tracking and Similar Technologies

Daya138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you when you return.

Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance cookies: Collecting aggregated data on how users interact with our platform to help us make improvements.
  • Functional cookies: Saving your preferences such as language, currency, and display settings to deliver a more personalized experience.
  • Marketing cookies: Used to display relevant offers and promotions based on your interests and usage history — with your consent only.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the daya138 platform.

7

Your Rights Over Personal Data

As a daya138 platform user, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

Access Rights

Request a copy of all personal information we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete information in your account.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations.

Right to Restriction

Request that we restrict the processing of your data in certain specified situations.

Right to Portability

Receive your data in a structured format for transfer to another service provider.

Right to Object

Object to the processing of your data for direct marketing or profiling purposes at any time.

To exercise any of the above rights, contact the daya138 support team via 24/7 live chat or email us at [email protected]. We will process your request within 30 business days from the date of receipt.
8

Data Retention Period

Daya138 retains your personal information for as long as your account is active or as long as needed to provide services to you. After account closure, we retain certain data for prescribed periods to meet our legal and regulatory obligations.

Data Type Retention Period Reason
KYC & identity records 5 years after account closure AML/CFT legal requirements
Transaction history 7 years Financial audit & tax compliance
Communication logs 2 years Dispute resolution
Technical & log data 12 months Security & fraud detection
Marketing data Until consent is withdrawn Promotional communications

Once the designated retention period has expired, your data will be securely deleted or anonymized in accordance with procedures established by daya138.

9

Amendments to This Privacy Policy

Daya138 reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, technology used, new legal requirements, or other reasonable operational reasons.

When we make significant changes to this policy, we will notify you via:

  • A clear notice on the homepage or within the daya138 platform
  • Email to the address registered to your account
  • In-app notifications on the daya138 mobile app (where applicable)

The changes will take effect on the date stated in the notice. Continued use of the daya138 platform after that date constitutes your acceptance of the latest version of our privacy policy. If you disagree with the changes made, you have the right to close your account before the amendment takes effect.

We recommend reviewing this privacy policy page periodically to stay informed about how we protect your information. The latest revision date is always displayed at the top of this page.
10

How to Contact Us

If you have any questions, concerns or complaints regarding our privacy policy or how we handle your personal data, please do not hesitate to contact us. Our privacy and support team is available to assist you at any time.

Contact Information
Live Chat: Available 24/7 on the daya138 platform
WhatsApp & Telegram: 24/7 in Bahasa Malaysia

We aim to respond to all privacy-related enquiries within 3 business days. For formal data rights requests, please clearly state the type of request so we can process it faster and more accurately.

Data Protection That Comprehensive

More than just a policy — daya138 actively enforces privacy protection at every layer of the platform.

Security
Bank-Grade Encryption

All your data is protected with 256-bit SSL/TLS encryption — the same security technology used by leading banking institutions worldwide. Every transaction, every login, every communication — all encrypted.

Controls
Your Own Access Controls

Through your daya138 account settings, you can manage privacy preferences, withdraw marketing consent, enable two-factor authentication and monitor login history — all in one easy-to-use panel.

Transparency
Clear & Transparent Policy

We believe in full transparency. Our privacy policy is written in plain language — not confusing legal jargon. You have the right to know exactly what happens to your data.

Compliance
Malaysian Legal Compliance

Daya138 operates in accordance with applicable data protection laws, including the requirements of Malaysia's Personal Data Protection Act. Legal compliance is not optional — it is an obligation we take seriously.

Prevention
Real-Time Threat Monitoring

Our security system operates 24/7 to detect and block suspicious activity before it affects your account. Any unauthorized access attempts are automatically prevented and recorded.

Support
24/7 Privacy Support in Bahasa Malaysia

Our dedicated team is ready to assist you with any data privacy inquiries in your preferred language. From data access requests to privacy complaints — we handle everything professionally and promptly.

Questions About Your Privacy

Not at all. daya138 has never and will never sell, rent, or trade your personal information to any third party for their commercial purposes. Your information is only shared with selected service providers who help us operate the platform, and only for specific, limited purposes. All such third parties are bound by strict confidentiality agreements.

You can submit a data access request by contacting the daya138 support team via 24/7 live chat or by emailing [email protected]. Clearly state that you are submitting a "Personal Data Access Request" and include your username and registered email address. We will process your request and provide a copy of your data within 30 business days.

When you close your account, daya138 will delete or anonymise your personal data that is no longer required. However, certain records such as transaction history and KYC documents must be retained for a period stipulated by law — typically between 5 and 7 years — to meet financial audit and anti-money laundering requirements. After that period, all data will be permanently deleted.

Yes, you can withdraw consent to receive marketing communications at any time. Click the "unsubscribe" link found at the bottom of any of our promotional emails, or contact the support team to update your communication preferences. Please note that account-related emails such as transaction notifications and security alerts will still be sent as they are essential for your account security.

Yes. The daya138 mobile app uses the same level of security as the web version — including 256-bit SSL encryption, two-factor authentication, and real-time activity monitoring. We recommend always keeping the app updated to the latest version to benefit from the most recent security improvements. Avoid using public WiFi networks without a VPN when accessing your account.
Trusted by 500,000+ Players

Privacy Protected, Calmer Gaming

Register a free account at daya138 and enjoy a safe, transparent online entertainment experience backed by a strict privacy policy. Your data is fully protected — play with peace of mind.

100% secure data
256-bit SSL
No data sharing
24/7 Support
Bahasa Melayu