Privacy Policy

Privacy Policy daya138
Malaysia Player Data Protection

Your privacy is more than a legal obligation to us — it is a core commitment of daya138. This document clearly explains how we collect, use, store, and protect your personal information every time you use our platform.

Last Updated: January 2026 Bahasa Melayu 256-bit SSL PDPA Compliance

Why We Use Your Data Secure with daya138?

Daya138 continuously invests in the latest security infrastructure to ensure every player's personal information is protected at every level.

256-bit SSL Encryption

All data transmitted between your device and daya138's servers is protected with 256-bit SSL encryption — the same standard used by the world's leading financial institutions.

Secure Data Storage

Your personal data is stored on secure servers with multi-layered access controls. Only authorised staff with a specific operational need can access your information.

No Data Sales

Daya138 has never and will never sell players' personal data to third parties for marketing purposes. Your data belongs to you — we only use it to improve your experience.

Player Data Controls

You have the right to access, edit, download, and request deletion of your personal data at any time through your account settings or by contacting our support team.

Malaysia PDPA Compliance

All data handling practices at daya138 comply with the Malaysia Personal Data Protection Act 2010 (PDPA), ensuring your data protection rights are fully recognised.

Communication Controls

You have full control over the types of marketing communications you receive from daya138. Unsubscribe at any time through your account notification settings.

1. Introduction

Welcome to the daya138 Privacy Policy. This document transparently explains how daya138 ("we", "our platform") collects, processes, stores, and protects your personal data when you register, login, or use any service on the daya138.onl website.

We understand that privacy is deeply personal. Your trust is our most valued asset. daya138 is therefore committed to managing your personal information in a fully transparent, responsible, and secure manner.

This Privacy Policy applies to all users who access the daya138 platform via web browser, mobile app, or any other digital channel we provide. By continuing to use our platform, you agree to the terms set out in this Privacy Policy.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy daya138 for a full overview of your rights and responsibilities as a player.

2. Personal Data We Collect

Daya138 collects your personal information through several methods depending on your interactions with the platform. Below are the types of data we collect and their purposes:

2.1 Information You Provide Directly

  • Registration information: Full name, date of birth, phone number, email address, and the password you create.
  • Identity verification information (KYC): A copy of your identity card (MyKad), passport, or other identity verification document when required.
  • Financial information: Bank account details, bank name, and account number for deposit and withdrawal processing.
  • Support communications: Any messages, inquiries, or complaints you submit to the daya138 support team.

2.2 Information Collected Automatically

  • Technical data: IP address, web browser type and version, device operating system, screen resolution, and device identifiers.
  • Usage data: Pages visited, games played, session duration, login frequency, and navigation patterns.
  • Transaction data: A complete record of all deposits, withdrawals, wagering, and financial activity in your account.
  • Location data: Country- or city-level location information based on IP address for regional eligibility verification purposes.
Data Type Primary Purpose Retention Period
Registration Information Identity verification & account management Throughout the active account period + 5 years
KYC Documents Regulatory compliance & fraud prevention 7 years after account closure
Transaction Data Financial & internal audit records 7 years after transaction
Technical Data Security & platform improvement 90 rolling days
Communication Records Customer support & dispute resolution 3 years

3. How We Use Your Data

Daya138 uses your personal data on a valid legal basis and only for the purposes stated. Here is how we use the information you share with us:

3.1 Account Management and Services

Your data is used to create and manage your daya138 account, process secure logins, verify your identity during financial transactions, and grant you access to all platform features including Slot Games, Live Casino, Fish Shooting Games, and Sports Betting.

3.2 Financial Processing

Your financial details are required to process deposits from various Malaysian local payment methods and to manage withdrawal of wins to your bank account securely and accurately. All financial transactions are encrypted and monitored in real time to detect any unusual activity.

3.3 Security and Fraud Prevention

Daya138 analyses usage patterns, technical data, and transaction records to detect and prevent fraud, money laundering, multi-account use, and any violations of our terms of use. This protects you and the daya138 player community as a whole.

3.4 Legal and Regulatory Compliance

Some of your data must be retained and processed to fulfil daya138's legal obligations, including compliance with the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) requirements, and any directives from relevant authorities.

3.5 User Experience Improvement

Player usage data and feedback help the daya138 development team identify areas for improvement, introduce relevant new features, and ensure the platform consistently performs at its best across all devices.

3.6 Communications and Marketing

With your consent, daya138 may send you information about the latest promotions, exclusive bonuses, new games, and platform updates via email or in-app notifications. You may unsubscribe from these marketing communications at any time.

4. Data Sharing with Third Parties

Daya138 does not sell, rent, or trade your personal data to any third party for their commercial purposes. However, there are certain situations where we need to share your data with trusted parties:

4.1 Trusted Service Providers

We share necessary data with third-party service providers that help daya138 operate, including licensed payment processors, game software providers, identity verification (KYC) services, and cloud computing infrastructure. All such providers are bound by strict data protection agreements.

4.2 Legal Requirements

Daya138 may disclose player data to government authorities, law enforcement, or relevant regulatory bodies when required by Malaysian law or a valid court order. This includes investigations related to money laundering, financial fraud, or other illegal activities.

4.3 Protection of daya138's Rights

In cases of legal disputes, suspected fraud, or threats to platform security, daya138 reserves the right to disclose relevant information to legal counsel, auditors, or parties involved in the dispute resolution process.

Important: daya138 is not responsible for the privacy practices of independent third parties, including game providers or payment platforms that have their own privacy policies. We encourage you to read the privacy policy of each service you use.

5. Cookies and Tracking Technologies

Daya138 uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and maintain the security of your login session.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how you use the platform to help us identify technical issues and improve performance.
  • Functionality Cookies: Stores your preferences such as language selection, display settings, and saved login details for your convenience.
  • Analytics Cookies: Helps us understand aggregate usage patterns for product development and user experience improvement.

5.2 Managing Cookie Preferences

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect certain functions of the daya138 platform, including the ability to stay logged in and access security features.

daya138 does not use cookies to track your activity on other websites or for third-party advertising purposes. All cookie data we collect is used solely to improve your experience on the daya138 platform.

6. Data Security Measures

Daya138 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure.

6.1 Technical Security

  • Data encrypted in transit using 256-bit SSL/TLS
  • Data encrypted at rest for sensitive information including bank details and KYC documents
  • Two-factor authentication (2FA) is available and encouraged for all player accounts
  • 24/7 real-time security monitoring with automated threat detection systems
  • Regular security testing by independent cybersecurity teams
  • Server infrastructure protected by multi-layered firewalls

6.2 Internal Access Controls

Access to player data within daya138 is restricted to staff who require it to perform their job duties. All access is logged and monitored. Staff who handle sensitive data undergo rigorous background checks and regular data security training.

6.3 Incident Response

Daya138 has a comprehensive incident response plan. In the event of a data breach that may affect players, we will notify affected players within the timeframe required by applicable law and take immediate steps to contain and remediate the situation.

7. Your Rights Over Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. daya138 fully respects and upholds the following rights:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of inaccurate or incomplete data via your profile settings or support.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction

You may request restriction of your data processing in certain situations during an investigation or dispute.

To exercise any of the above rights, contact the daya138 data protection team via live chat or our support email. We will process your request within 30 business days. Some requests may require additional identity verification before they can be processed.

8. Data Retention Policy

Daya138 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

Active accounts — your personal data will be retained for the duration your account remains active with daya138. Once you request account closure, we will retain your data for an additional period as required by Malaysia's financial and consumer protection regulations, typically between 5 to 7 years depending on the type of data.

Once the mandatory retention period has ended, your personal data will be securely deleted or permanently anonymised from our systems so it can no longer be associated with you. This process is carried out in accordance with established data deletion procedures that are regularly audited.

9. Cross-Border Data Transfers

In the course of its operations, daya138 may need to transfer your personal data to servers or service providers located outside Malaysia. This includes cloud computing infrastructure providers and international gaming software providers.

When your data is transferred outside Malaysia, daya138 ensures that protections equivalent to Malaysia's PDPA standards are applied through legally binding data processing agreements with all receiving parties. We only work with providers in countries or regions that have recognised data protection laws or have agreed to the contractual standards we set.

Any cross-border data transfers by daya138 are solely for platform operational purposes and do not involve disclosure of data to unrelated parties. The security of your data remains our top priority regardless of where it is processed.

10. Children's Privacy

The daya138 platform is exclusively for adults aged 18 years and above. daya138 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that someone under the age of 18 has registered an account at daya138, please notify our support team promptly so that appropriate action can be taken.

11. Links to Third-Party Websites

The daya138 platform may contain links or references to third-party websites or services, including game providers and service partners. These links are provided for your convenience and do not imply that daya138 endorses or is responsible for the content, privacy policies, or practices of those third parties.

When you follow a link to an external website, you will be leaving the daya138 platform and will be subject to that site's privacy policy. We encourage you to read the privacy policy of every website you visit to understand how your data is handled there.

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how daya138 handles your personal data, our data protection team is here to help.

You can reach us via:

  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the daya138 platform
  • Support Email: [email protected] (displayed as text — not a link)
  • FAQ Page: Visit FAQ page us for answers to common questions about privacy and security

We aim to respond to all privacy-related enquiries within 3 business days. For requests involving data rights such as access, correction, or deletion, please provide your complete account details so we can process your request efficiently.

Effective date of this Privacy Policy: January 2026. daya138 reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated to you via in-platform notifications or email at least 14 days before the changes take effect.

Trusted Platform

Ready to Play Safely
and with Full Confidence?

Join hundreds of thousands of Malaysian players who already trust daya138. With best-in-class data protection, 256-bit SSL encryption, and full PDPA compliance, you can focus on your game without worrying about the security of your personal information.

256-bit SSL
Full Encryption
PDPA
Full Compliance
24/7
Live Support
Zero
Data Sales
Bahasa Melayu