Full Data Protection

Privacy Policy Luxury138 – Full Security & Data Privacy Guaranteed for Malaysian Members

At luxury138, your privacy is more than an obligation — it is a core commitment we have upheld from day one. This document clearly and transparently explains how we collect, use, store, and protect your personal data as a member of our platform in Malaysia.

Updated: 1 June 2026 PDPA Compliant SSL 256-bit Malaysia
Trust & Security
🔐
256-bit SSL Encryption
All data is transmitted in encrypted form
📋
Malaysia PDPA Compliance
Personal Data Protection Act 2010
🚫
No Data Sales
Your data is never sold to any party
🗑️
Right to Data Deletion
You may request data deletion at any time
🛡️

Personal Data Protection Act (PDPA)

Luxury138 operates in full compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Every piece of data collected has a clear and lawful purpose, and you have the right to know, access, and correct your data at any time.

🔒

Bank-Grade Encryption

All communications between your device and luxury138's servers are secured with 256-bit SSL encryption — the same standard used by Malaysia's leading banks such as Maybank and CIMB to protect online financial transactions.

👁️

Full Transparency in Data Usage

We clearly inform you of every type of data we collect, why it is collected, and how it is used. luxury138 does not collect data silently or without your knowledge.

🚫

No Sale of Data to Third Parties

Luxury138 has never and will never sell, rent or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we are merely its responsible custodian.

⚙️

Full Control in the Hands of Members

You have the right to access, correct, transfer, or request deletion of your personal data from luxury138's systems. Such requests may be submitted to our privacy team and will be processed within 30 days.

🔔

Immediate Notification in the Event of a Breach

In the event of any security incident involving member data, luxury138 is committed to notifying affected members within 72 hours of the incident being detected, in line with international best practices for data protection.

1

Introduction & Scope of This Privacy Policy

This Privacy Policy is published by luxury138 and applies to all registered members and visitors to the website https://luxury138.biz. It outlines our privacy practices regarding the collection, use, storage, protection, and disclosure of your personal information when using our platform and services.

By registering as a luxury138 member or continuing to use our platform after the updated effective date of this Privacy Policy, you are deemed to have read, understood and agreed to all terms stated herein. If you do not agree with any part of this policy, please discontinue use of the luxury138 platform and contact us to close your account.

This Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. In the event of any conflict between this policy and applicable Malaysian law, Malaysian law shall prevail.

Important Information

Luxury138 acts as the data controller for personal information collected from members in Malaysia. All privacy-related enquiries may be directed to our Privacy Officer at: privacy@luxury138.biz

2

Types of Personal Data We Collect

Luxury138 collects only the personal information necessary to deliver services that are safe, efficient, and compliant with regulations. We do not collect excessive or irrelevant data beyond the scope of the services we offer.

2.1 Data You Provide Directly

  • Identity Information: Full name, date of birth, MyKad or passport number, gender, and nationality
  • Contact Information: Email address, mobile phone number, residential address in Malaysia
  • Financial Information: E-wallet account name (TNG, GrabPay, Boost, ShopeePay, DuitNow) or bank account (Maybank, CIMB, and others) for deposit and withdrawal purposes
  • Verification Documents: A copy of your MyKad, bank statement, or other documents requested during the KYC (Know Your Customer) process

2.2 Automatically Collected Data

  • Usage Data: Game activity records, betting history, login and logout times, games played
  • Technical Data: IP address, device type, operating system, browser type, screen resolution
  • Cookie Data: Session cookies, user preference cookies, and analytics cookies to understand platform usage patterns
  • Location Data: Approximate location based on IP address for service area eligibility verification
Data Type Primary Purpose Retention Period Deletable?
Identity Information Account verification, KYC 5 years after account closure Conditional
Contact Information Communication & Support Throughout active account Yes
Transaction Records Financial regulatory compliance 7 years (statutory requirement) No
Game Data Services & VIP Programme 3 years Yes
Technical Data / IP Security & Fraud Prevention 12 months Yes
Analytics Cookies Platform improvements 6 months Yes
3

How We Use Your Data

Every piece of data collected by luxury138 serves a specific, legitimate, and proportionate purpose. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

3.1 Primary Purposes for Data Use

  • Account Management: Registration, identity verification, login, and member profile management for luxury138
  • Transaction Processing: Processes deposits via TNG eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks and FPX, as well as withdrawals of winnings to the same payment methods
  • Service Provision: Gives you access to slots, live casino, football betting, badminton, e-sports and all games on the platform
  • VIP Program: Tracks and calculates VIP points, processes weekly cashback and manages your membership tier
  • Customer Support: Providing technical support and resolving any queries or complaints you submit

3.2 Additional Purposes (With Your Consent)

  • Sending promotional information, bonus offers, and platform updates via email or notifications (you may opt out at any time)
  • Conducts member satisfaction surveys for service improvement
  • Targeted marketing based on your game preferences (only with your explicit consent)
No Third-Party Marketing Policy

Luxury138 does not share, sell or transfer your personal data to third-party marketing companies for advertising purposes unrelated to luxury138 services. You will not receive promotional emails from other companies as a result of your luxury138 membership.

4

Data Sharing & Third Parties

There are certain situations where luxury138 needs to share some of your data with trusted third parties. All such data sharing is strictly for legitimate service operations and not for any commercial marketing purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, luxury138 is required to share the relevant transaction information with payment gateway providers that are registered and licensed in Malaysia. This information is limited to data necessary for transaction verification only and does not include other sensitive details.

4.2 Game Software Providers

Slot, Live Casino, and e-sports game providers partnered with luxury138 may receive the minimum game activity data required to deliver their services. All such providers are bound by strict data protection agreements.

4.3 Legal Authorities

Luxury138 may be required to disclose member data to Malaysian authorities (such as the Royal Malaysia Police, MACC, or the Insolvency Department) upon receipt of a valid court order or official request in the course of a criminal investigation. In such cases, we will disclose only the minimum information necessary.

Data Sharing Guarantee

All third parties that receive luxury138 data are required to sign a Data Processing Agreement (DPA) and are subject to periodic privacy audits. They are prohibited from using your data for any purpose other than what has been agreed upon with luxury138.

5

Data Security & Protection Measures

Luxury138 continuously invests in security infrastructure to ensure that our members' personal and financial data is protected at the highest level technically achievable.

luxury138 System Security Standards
Data Encryption (256-bit SSL)100%
Firewall & DDoS Protection98%
Two-Factor Authentication (2FA)95%
24/7 Activity Monitoring100%
Third-Party Security AuditPeriodic

5.1 Encryption & Access Control

All personal data stored in luxury138 systems is encrypted using AES-256 encryption. Access to member data within internal systems is strictly limited on a need-to-know basis — only staff who genuinely require access to carry out their duties are permitted.

5.2 Payment Card Information

Luxury138 does not store any credit or debit card information in our systems. All e-wallet and online banking transactions are processed directly through licensed payment gateways that comply with PCI-DSS standards. This means your bank account numbers and e-wallet details are never stored on luxury138 servers.

6

Member Rights Regarding Personal Data

As a luxury138 member in Malaysia, you have the following rights regarding your personal data under Malaysia's PDPA:

👁️
Right of Access
You have the right to know about and obtain a copy of all personal data we hold about you.
✏️
Right to Rectification
If your data is inaccurate or outdated, you have the right to request an immediate correction.
🗑️
Right to Erasure
You may request the deletion of your data, subject to applicable legal obligations.
📦
Data Portability Rights
You may request a copy of your data in a format that is portable to other platforms.
🚫
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
⏸️
Right to Restrict Processing
Under certain circumstances, you may request that luxury138 restrict the processing of your data.

To exercise any of the above rights, submit a written request to privacy@luxury138.biz stating the right you wish to exercise and your account details. luxury138 is committed to processing all requests within 30 working days.

7

Cookies & Tracking Technologies

Luxury138 uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and maintain the security of your login session.

Types of Cookies We Use

  • Session Cookies (Required): Required to maintain your login session — without this cookie, you would need to log in again each time you open a new page
  • Preference Cookies: Saves your preferences such as interface language and display mode
  • Analytics Cookies: Helps us understand how members use the platform for improvement purposes — this data is aggregated and is not used to identify any individual
  • Security Cookies: Helps detect suspicious activity and protect your account from unauthorised access

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the luxury138 platform.

8

Privacy Policy Updates & Contact Us

Luxury138 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or new service features. Members will be notified of any material changes via their registered email address at least 14 days before the changes take effect.

For any enquiries, complaints, or requests relating to your data privacy at luxury138, you may reach us through the following channels:

  • Privacy Email: privacy@luxury138.biz
  • Support Email: support@luxury138.biz
  • Live Chat: Available 24/7 via the luxury138 platform
  • Response Time: Within 3 business days for general enquiries, 30 business days for data rights requests

Privacy Policy Update History

June 2026
Added a more detailed section on member rights. Updated data deletion policy and record retention periods. Added ShopeePay and Boost as payment methods under financial data processing.
Jan 2026
Reviewed cookie policy to align with updated best practices. Added a "Data Portability Rights" section in line with PDPA developments.
Jul 2026
Updated terms on data sharing with new e-sports game providers. Added a more detailed data retention schedule.
Feb 2026
Comprehensive review of the data security section in line with the luxury138 server infrastructure upgrade. Addition of the 72-hour security incident notification policy.

Your Data Is Safe. Your Platform Is Trusted.

With 256-bit SSL protection, full PDPA compliance and a strict no data-selling commitment, luxury138 is the safe and responsible online casino platform of choice for Malaysians.

Security Summary
Encryption SSL 256-bit
Compliance PDPA 2010
Data Sales Not Permitted
Incident Notification 72 Hours
Security Audit Periodic
Complaint Response 3 Working Days
Secure Payments Accepted
TNG eWallet GrabPay DuitNow Boost ShopeePay Maybank2u CIMB Clicks FPX

No card or bank account details are stored in luxury138's systems.

Bahasa Melayu