Privacy Policy nos138 – Member Personal Data Protection

1 Introduction

Nos138 ("we," "platform," or "nos138") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy clearly explains how nos138 collects, stores, uses, and protects your personal information when you register and use the nos138.onl platform.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. As an online gaming platform serving Malaysian users, nos138 regards member trust as its most valuable asset — and personal data protection is the foundation of that trust.

If you have any questions about how nos138 handles your personal data, our support team is available via live chat or email at [email protected].

2 Information We Collect

Nos138 collects your personal information through several means depending on how you interact with our platform. The following are the categories of information we collect:

Information You Provide Directly:

• Full name as per identity card
• Malaysian identity card number (MyKad) or passport number
• Email address and mobile number
• Date of birth and residential address
• Bank account or digital wallet information for deposit and withdrawal purposes
• Uploaded identity verification (KYC) documents

Automatically Collected Information:

3 How We Use Your Data

Personal information collected by nos138 is used solely for legitimate purposes related to platform operations. We will not use your data for any other purpose without your prior consent.

The primary purposes for which your data is used:

• Account Management: Create and manage your member account, including the registration process, identity verification (KYC), and password recovery.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Service Delivery: Grants access to all games, promotions, and nos138 platform features you are eligible to use.
• Security & Anti-Fraud: Detect and prevent fraudulent activity, money laundering, account abuse, and other security threats.
• Service Communications: Send important notices related to your account, transactions, changes to terms, or security issues.
• Legal Compliance: Fulfil compliance obligations under applicable Malaysian laws, including AML and KYC requirements.
• Platform Improvement: Analyse usage patterns to improve the performance, interface, and user experience of the nos138 platform.
• Marketing (with consent): Send promotional information, bonuses, and exclusive offers — only if you have agreed to receive marketing communications.

You may withdraw consent to receive marketing communications at any time by contacting the nos138 support team or through your account settings.

4 Sharing Information with Third Parties

Nos138 will not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your information is only shared in the following limited circumstances:

• Service Providers: Companies that help us operate the platform — such as payment providers, game software providers, cloud service providers, and analytics companies — are all bound by strict confidentiality agreements.
• Legal Obligations: When required by Malaysian law, court order, or a competent regulatory authority.
• Fraud Prevention: With identity verification agencies or industry fraud prevention networks to protect the platform and members from unlawful activity.
• Business Transfers: In the event of a merger, acquisition, or sale of nos138 assets, member information may be transferred as part of that transaction. You will be notified in advance.

5 Data Security

Nos138 implements robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Security measures we use:

• 256-bit SSL Encryption: All data transmitted between your browser and nos138 servers is protected with industry-grade encryption.
• Two-Factor Authentication (2FA): An additional security layer for login and large transactions via OTP codes sent to your registered phone number.
• Real-Time Monitoring: The nos138 security monitoring system operates around the clock to detect any suspicious activity in real time.
• Internal Access Controls: Only authorised nos138 staff with a legitimate business need may access member personal data.
• Regular Security Audits: nos138 conducts regular security assessments and penetration testing by independent parties to ensure systems remain up to date and secure.
• Secure Data Backup: Data is regularly backed up to servers located in certified data centres integrated with physical and digital security protocols.

6 Cookies & Tracking Technologies

Nos138 uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns, and ensure platform security. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how members use the platform — most frequently visited pages, response times, and any technical issues that may occur.
• Functional Cookies: Save your preferences such as preferred language, display theme, and account settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used via certified third-party analytics tools to analyse platform traffic and usage patterns on an aggregated and anonymised basis.

You may manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the nos138 platform.

7 Your Rights Regarding Personal Data

As a nos138 member, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. nos138 respects and facilitates the exercise of these rights:

To exercise any of the above rights, contact the nos138 privacy team by email at [email protected], stating the type of request. nos138 will respond within 14 business days of receiving a complete request.

8 Data Retention Period

Nos138 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable law.

• Active Account Data: Retained for the duration your account is active, plus the minimum retention period prescribed by law.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial compliance requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by law.
• Security Activity Log: Retained for 2 years for investigation and fraud prevention purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires and there is no legal obligation to continue storing the data, nos138 will securely delete or anonymise it.

9 Child Protection

The nos138 platform is restricted to users aged 18 and above. nos138 does not intentionally collect or process personal data of children under 18 years of age.

If nos138 finds that personal data of a child has been collected without our knowledge, we will immediately take steps to delete that information and close the associated account. nos138 uses a combination of age verification and KYC processes to ensure that only adults can register and use the platform.

10 Privacy Policy Amendments

Nos138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to members via:

• A prominent notice on the nos138 platform home page for at least 7 days
• Emailed to all registered members at least 7 days before changes take effect
• A pop-up notice upon the next login after changes are published

The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated terms.

11 Contact Us

For any inquiries, concerns, or requests regarding this Privacy Policy or the processing of your personal data by nos138, please contact us through the following channels:

• Privacy Email: [email protected] — please state "Privacy Inquiry" in the email subject line
• Live Chat: Available 24/7 via the live chat icon on the nos138 platform
• Response Time: nos138 aims to respond to all privacy-related inquiries within 3 business days