Your privacy is more than a legal obligation to us — it is a responsibility we take seriously. Find out exactly how super138 collects, uses, and protects your information.
Six core principles governing how we handle the personal data of all super138 members.
All data transmitted between your device and super138 servers is protected with 256-bit SSL encryption — the same standard used by major banks in Malaysia.
Your personal and financial data is stored in fully encrypted databases at Tier-3 certified data centers with strict physical and digital access controls.
Only authorized personnel have access to your personal data, and every access is automatically logged and monitored to detect any improper use.
You have the right to access, correct, transfer, or request deletion of your personal data at any time by contacting the super138 support team.
Super138 has never and will never sell or rent your personal data to third parties for marketing purposes. Your data belongs to you, not to anyone else.
Super138's data protection practices are reviewed regularly by our internal security team and audited by qualified independent cybersecurity firms.
This Privacy Policy ("Policy") describes how super138 ("we", "the platform") collects, uses, stores, and protects your personal information when you use our platform. This Policy applies to all users who visit, register for, or use any super138 service.
We are committed to protecting your privacy and complying with relevant data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). By using the super138 platform, you agree to the practices described in this Privacy Policy.
Super138 takes seriously the trust you place in us when you register and use the platform. We understand that personal information is sensitive and must be handled with full responsibility.
This Policy covers all data collected through:
Note: This Policy should be read alongside Terms and Conditions super138. In the event of any conflict between these documents, the Privacy Policy shall prevail on all matters relating to personal data.
We only collect data that is strictly necessary to operate the platform and provide you with the best service. The following are the categories of data we collect:
Important: super138 will never ask for your account password via email, SMS, or live chat. If anyone claims to be super138 and asks for your password, it is a fraud attempt. Report it to us immediately.
| Data Category | Primary Purpose | Legal Basis for Processing |
|---|---|---|
| Personal Identity | KYC verification, fraud prevention | Legal obligation |
| Contact Data | Account communications, security OTP | Contract performance |
| Financial Data | Deposit & withdrawal processing | Contract performance |
| Platform Activity | Account management, fraud detection | Legitimate interest |
| Technical Data | Platform security, analytics | Legitimate interest |
Collected data is used solely for legitimate purposes necessary to properly operate the super138 platform. We do not use your data for unrelated purposes without your consent.
Your data is used to create and manage your super138 account, verify your identity at login, process deposits and withdrawals accurately, and maintain up-to-date account records.
The super138 AI system analyses account activity patterns in real time to detect any unauthorised access, fraud attempts, or suspicious activity — all to keep your account and funds protected.
Super138 uses identity and transaction data to comply with anti-money laundering (AML), KYC, and financial reporting requirements as required by relevant regulatory authorities.
De-identified platform usage data is used to understand usage patterns, identify areas for improvement, and develop better new features for all users.
We use your contact information to send important account notifications such as deposit confirmations, security alerts, terms updates, and relevant promotional information (which you can unsubscribe from at any time).
Our guarantee: super138 does not use your personal data to sell advertising to third parties or for aggressive marketing profiling. Your data is used to deliver the services you request, nothing more.
Super138 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where data sharing is necessary or required:
We share the minimum required data with service providers who help us operate the platform, including:
All third-party service providers are bound by strict confidentiality agreements and are only permitted to use shared data for the specific agreed purposes.
Super138 may be required to disclose your data if mandated by law, court order, or a request from competent authorities in connection with financial crime investigations, anti-money laundering efforts, or public safety matters.
In circumstances where we need to protect the rights, property, or safety of super138, other users, or the public, relevant information may be shared with appropriate parties such as law enforcement or regulatory bodies.
Protecting your data is a core commitment of super138. We continuously invest in the best security technologies and practices to keep your information safe at all times.
All data transmitted between your device and super138 servers is encrypted using TLS 1.3 protocol with 256-bit encryption. Data stored in our databases is also encrypted using AES-256, ensuring it remains unreadable even in the unlikely event of a system breach.
Access to users' personal data is limited to staff who require it to perform their duties. All access is automatically logged and monitored. Every staff member with access to sensitive data undergoes thorough background checks and comprehensive privacy training.
The super138 security system monitors the platform 24 hours a day, 7 days a week to detect any threats or suspicious activity. Anomalies are identified and addressed automatically within a very short timeframe.
Data Breach Notification: In the event of a data breach affecting your personal data, super138 will notify you within 72 hours of becoming aware of the incident, in line with industry best practices.
Super138 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.
You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality, including the ability to log in securely.
Under applicable data protection laws, you have the following rights regarding your personal data held by super138:
To exercise any of the above rights, contact the super138 support team via live chat or email at [email protected]. We are committed to resolving every request within 30 business days.
Super138 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law.
Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with established data disposal procedures.
The super138 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.
If we discover that personal data of a minor has been collected without the knowledge of a parent or legal guardian, we will take immediate action to delete that data and close the relevant account.
Parents or guardians who believe their child may have registered on our platform are encouraged to contact us immediately at [email protected].
Super138 reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Each version of the Policy will be displayed with the latest update date at the top of this document.
For significant changes, we will send you a notification via your registered email or an in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes your acceptance of the updated policy.
Recommendation: Check this page periodically to stay informed about how we protect your data. The date of the last update is always displayed at the top of this page.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us:
For official privacy complaints, please send an email with the subject line "Privacy Complaint" along with your account number and a detailed description of your concern. We are committed to resolving every privacy complaint within 14 business days.
With 256-bit SSL encryption, a transparent privacy policy, and our full commitment to protecting your data — you can focus on gaming without worrying about the security of your personal information.
For users aged 18 and above. Play responsibly.