Privacy Policy murah138 — Malaysian User Data Protection

Murah138 ("we", "platform" or "murah138.my") is an online gaming platform operator serving users in Malaysia. We understand that member trust is the most valuable asset in this industry, and that trust begins with transparent and responsible management of your private data.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data you share with us when using the murah138 platform. This document applies to all users of our platform, including website visitors, registered users, and former members.

The murah138 Privacy Policy is built in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing personal data processing in Malaysia. We comply with all seven data protection principles set out in the PDPA, including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

Murah138 collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we may collect:

We only collect data that is strictly necessary for the stated purposes. murah138 does not collect personal data that is excessive or irrelevant to the operation of our platform.

Murah138 collects personal data through the following channels:

• Account Registration: When you register a new account at murah138, you provide your identity and contact information directly through the online registration form.
• KYC Verification Process: During the Know Your Customer process, you may be asked to upload a copy of your identification document, such as a Malaysian identity card or passport.
• Financial Transactions: Financial data is collected when you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, as well as during the withdrawal process.
• Platform Usage: Technical and behavioural data is automatically collected as you browse and use the murah138 platform via cookies and related tracking technologies.
• Customer Communications: When you contact our support team via live chat, email or other channels, those conversations may be recorded for training and service improvement purposes.
• Authorised Third Parties: In certain cases, we may receive your data from approved third-party identity verification providers or fraud prevention agencies.

Murah138 uses your personal data solely for the following legally justified purposes:

• Account Management: Creating, managing, and maintaining your member account, including registration processing, login, and account settings.
• Transaction Processing: Processing all deposits and withdrawals via Malaysian local payment methods supported by our platform.
• Identity Verification: Conducting the necessary KYC checks to ensure account security and compliance with anti-money laundering (AML) laws.
• Platform Security: Identifying, investigating, and preventing fraudulent activity, money laundering, or any misuse of the platform.
• Service Communications: Sending you important notifications related to your account, transactions, promotions, and policy updates.
• Responsible Gaming: Monitor gaming habits to identify signs of problem gambling and provide appropriate support in line with our responsible gambling policy Responsible Gaming us.
• Service Improvement: Analysing platform usage patterns to improve the user experience and develop new features.
• Legal Compliance: To fulfil legal and regulatory obligations applicable to murah138's platform operations in Malaysia.

Murah138 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, we may share your personal data in the following limited circumstances:

• Payment Provider: Required financial data is shared with approved payment service providers — such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX gateway processors — solely for the purpose of processing your transactions.
• Identity Verification Provider: Identity information may be shared with authorised third-party KYC verification companies for verification purposes only.
• Game Providers: Minimum technical data required may be shared with third-party game software providers to ensure smooth gameplay.
• Legal Authority: murah138 will disclose personal data when required by law, court order or a valid request from a Malaysian government authority.
• Anti-Fraud Agency: In cases of suspected fraud or money laundering, relevant data may be shared with the appropriate agencies.

All third parties that receive murah138 member data are bound by strict confidentiality agreements and are required to protect that data to a standard equal to or exceeding our own data protection standards.

Murah138 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data Encryption: All sensitive data is encrypted using 256-bit SSL/TLS protocols in transit and stored in encrypted format on our servers.
• Multi-Layer Firewall: murah138's server infrastructure is protected by a multi-layered firewall system and an Intrusion Detection System (IDS) that monitors for threats 24/7.
• Strict Access Controls: Access to member personal data is restricted to staff who genuinely require it to carry out their responsibilities, based on a strict need-to-know basis.
• Two-Factor Authentication: murah138's internal systems require two-factor authentication for all access to databases containing member information.
• Regular Security Audits: murah138 conducts regular security assessments and penetration testing by independent security experts to identify and address potential vulnerabilities.
• Staff Training: All murah138 staff undergo regular data protection and privacy training to foster a strong data protection culture within the organisation.

While we take all reasonable precautions, no security system can guarantee absolute protection. We encourage you to take your own protective measures as well, such as using a strong password and never sharing your murah138 account login credentials with anyone.

Murah138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are general data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in compliance with Malaysian tax and financial regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in compliance with anti-money laundering legal requirements.
• Communication Logs: Customer support conversation records are retained for 2 years for reference and dispute resolution purposes.
• Technical Data (Logs): Access logs and technical data are retained for 12 months for security purposes and technical troubleshooting.

When data is no longer needed and there is no legal obligation to retain it, murah138 will delete or anonymise it in a secure and irreversible manner.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please submit a written request to privacy@murah138.my including your full name, account number, and details of your request. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 days with prior notice to you.

Murah138 uses cookies and similar tracking technologies to enhance the user experience and collect statistical information about platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how visitors use the platform — pages frequently visited, error messages, and so on — to help us improve website performance.
• Functional Cookies: Allows the platform to remember your preferences such as language, region and display settings to provide a more personalised experience.
• Analytics Cookies: Used to understand platform usage patterns in an aggregated and anonymised form for the purpose of improving murah138 services.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the murah138 platform. For more information on managing cookies, refer to your web browser's help documentation.

The murah138 platform is exclusively for users aged 18 years and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we find that personal data of a minor has been collected without proper age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account on murah138 are encouraged to contact us promptly at privacy@murah138.my so that appropriate action can be taken without delay.

Murah138 reserves the right to update this Privacy Policy from time to time to reflect changes in business practices, legal requirements or technological developments. Any material changes will be communicated to you via:

• Notices prominently displayed on the murah138 platform homepage.
• Email to the address registered to your account at least 14 days before the changes take effect.
• In-account notifications when you are logged in to the platform.

Your continued use of the murah138 platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: privacy@murah138.my
• General Support Email: support@murah138.my
• Live Chat: Available 24/7 via the murah138 platform

Our Data Protection Officer (DPO) team is ready to assist you and will respond within 2 working days for privacy-related enquiries. For more complex data subject rights requests, please refer to the procedure outlined in Section 8 above.

We value the trust you place in murah138 and are committed to ensuring your personal data is always handled with full responsibility, transparency, and integrity.