Official Documents

Privacy Policy Giga138

Your privacy is our priority. This document transparently explains how giga138 collects, processes, protects, and respects the personal data of every player in Malaysia.

Updated: January 2026
256-bit SSL
Full encryption
Secure KYC
Identity verification
No Data Sales
Your data belongs to you

Content


Fully Protected

The giga138 platform complies with international data protection standards to keep you safe.

256-bit SSL Encryption
No data sales
Secure KYC
Limited retention

01  Introduction

Welcome to the giga138 Privacy Policy. This document is our written commitment to you — our valued players across Malaysia — on how we handle your personal information with full responsibility and transparency.

Giga138 is an online gaming platform operating under a valid licence and adhering to recognised data protection frameworks. We believe that player trust is our most valuable asset, and it starts with how we handle your personal data.

By using the Giga138 platform — whether via the website, iOS or Android mobile app, or any of our other official channels — you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.

This Privacy Policy is to be read together with Terms & Conditions giga138 and its pages Responsible Gaming us, all of which together form the entire agreement between you and giga138.

This policy applies to all users of the Giga138 platform, including visitors who browse the website without registering an account. The data collected varies depending on your level of engagement with our platform.

02  Data We Collect

Giga138 only collects data that is genuinely necessary to operate the platform, ensure account security, and fulfil legal compliance obligations. We do not collect data excessively or without a clear purpose.

Below are the categories of data we collect and their respective purposes:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad/passport number, date of birth Account registration & KYC verification
Contact Data Email address, phone number Account communications & notifications
Financial Data Bank account number, account holder name Deposit & withdrawal processing
Technical Data IP address, device type, web browser Security & Fraud Detection
Usage Data Game history, session duration, game preferences Service improvements & responsible gaming
Communication Data Support chat history, feedback Customer Support Improvements
giga138 does not collect sensitive information such as biometric data, political views, or religious beliefs. Financial data collected does not include full credit/debit card numbers — such information is processed directly by PCI-DSS certified payment processors.

03  How We Collect Data

Your data is collected through various channels as you interact with the Giga138 platform. We ensure that our data collection methods are transparent and comply with privacy-by-design principles (privacy by design).

  • Account Registration: When you register, we collect basic information such as your name, email, phone number, and date of birth to create a valid and verifiable account.
  • KYC Process: To meet compliance requirements, you are asked to upload an official identification document during the identity verification process. This document is stored in a secure, encrypted environment.
  • Financial Transactions: Bank account information is collected when you register a payment method for deposits and withdrawals.
  • Platform Usage: Usage data is collected automatically when you use the platform — including games played, session duration, and in-account actions.
  • Support Communications: When you contact our support team via live chat, the conversation record is stored to help resolve issues more efficiently in the future.
  • Cookies & Similar Technologies: giga138's website and app use cookies to enhance the user experience and analyse usage patterns. Further details are provided in Section 8.

04  Purpose of Data Use

Every piece of data we collect has a clear and legitimate purpose. giga138 uses your data for the following purposes, and only for these purposes:

  1. Account Operations: Creating, managing, and maintaining your player account — including processing deposits, withdrawals, and bonus management.
  2. Verification & KYC: Meeting legal obligations related to player identity verification and anti-money laundering (AML) compliance.
  3. Platform Security: Detecting and preventing fraud, unauthorised access, account abuse, and other suspicious activities that could compromise other players' security.
  4. Service Improvements: Analysing platform usage patterns to improve the user experience, introduce new features, and optimise platform performance.
  5. Important Communications: Sending important notifications related to your account — including transaction confirmations, security alerts, and policy updates that directly affect you.
  6. Responsible Gaming: Monitoring gameplay patterns to identify and support players who may need responsible gaming assistance, in line with giga138's commitment to player welfare.
  7. Legal Compliance: Fulfilling legal requirements, court orders, or requests from lawful authorities under applicable law.
giga138 does not use your data for third-party advertising, commercial profiling for resale, or any purpose unrelated to platform operations and player security.

05  Data Sharing

Giga138 does not sell, rent, or trade players' personal data to any third party. This is not merely a policy — it is a core principle that no commercial consideration can override.

However, in certain limited situations, we may share your data with the following parties:

  • Payment Processors: Information required to process deposits and withdrawals is shared with certified payment processors bound by strict confidentiality agreements.
  • Game Software Providers: Minimum technical information required to operate games and ensure game integrity is shared with licensed software providers.
  • Regulatory Authority: When required by law or by an official order from a competent authority, we will comply with such requests after verifying their legitimacy.
  • Auditors & Compliance Partners: Independent auditors verifying the platform's compliance with industry standards — including RNG and financial compliance — may have limited access to data strictly required for audit purposes.

Every third party that receives giga138 player data is contractually bound to protect that data to security standards no less stringent than those of giga138 itself.

All data sharing agreements with third parties are limited in scope and duration, and are subject to periodic review by the giga138 compliance team.

06  Data Security

Giga138 invests seriously in data security infrastructure. We employ multiple layers of protection to ensure your personal data is always safeguarded against unauthorised access, loss, or breach.

  • 256-bit SSL Encryption: All communications between your device and giga138 servers are encrypted using TLS/SSL protocol with 256-bit key strength — the highest security standard used by global financial institutions.
  • Secure Data Storage: Personal data is stored in a protected server environment with strict access controls, multi-layered firewalls, and real-time threat monitoring.
  • Internal Access Controls: giga138 staff may only access data required for their specific role, based on the principle of least privilege (least privilege). All access to sensitive data is logged and audited.
  • Stored Data Encryption: Sensitive data such as identification document details and financial information is encrypted at rest, not only during transmission.
  • Regular Security Testing: The giga138 platform undergoes penetration testing (penetration testing) and periodic independent security audits to identify and address any vulnerabilities before they can be exploited.
  • Incident Response Plan: In the event of any security incident involving player data, giga138 has a comprehensive response protocol in place, including procedures to notify affected players within the stipulated timeframe.
While giga138 takes all reasonable measures to protect your data, no security system can guarantee absolute protection. You also play an important role by keeping your password and account login details confidential.

07  Your Rights

As a giga138 player, you have certain rights regarding your personal data. giga138 respects and facilitates the exercise of these rights, provided they do not conflict with our legal obligations.

Your Rights Regarding Personal Data

Giga138 makes it easy for you to take control of your own personal data. Below are the rights you hold as our player.

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Access requests can be submitted through our support team and will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. Log in to your account settings or contact our support team to update your personal information.

Right to Erasure

You may request the deletion of your personal data. However, this right is subject to our legal obligations — some data may need to be retained for a period required by law.

Right to Restriction

You may request that we restrict the processing of your data in certain situations — for example, while you are disputing the accuracy of your data or while a deletion request is under review.

Right to Data Portability

You have the right to receive a copy of your data in a machine-readable, portable format, allowing you to transfer that information to another service provider if needed.

Right to Object

You may object to the processing of your data for specific purposes such as marketing communications. Objection requests will be enforced within 5 business days of verification.

To exercise any of the above rights, contact the giga138 support team via the in-platform live chat available 24 hours a day, 7 days a week. We will verify your identity before processing any data-related requests.

08  Cookies & Tracking

Giga138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are critical to platform operation.
  • Preference Cookies: Saving your preferences such as language, display theme, and favourite game selections to streamline your experience on future visits.
  • Analytics Cookies: Helping us understand how players use the platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This information is used for continuous improvement.
  • Security Cookies: Used to detect suspicious activity, unauthorised login attempts, and to ensure every session remains secure from start to finish.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Giga138 platform. The Giga138 mobile app uses device identifiers and similar technologies that operate on the same principles as web cookies.

09  Data Retention

Giga138 follows a data minimisation principle — we only retain personal data for as long as strictly necessary for the purpose it was collected, or as required by applicable law.

  • Active Account Data: While your account is active, your personal data is retained for platform operational purposes and to continue providing services to you.
  • KYC & Compliance Data: Identity verification records and KYC documents are retained for a minimum of 5 years after account closure, in compliance with applicable anti-money laundering legal requirements.
  • Transaction Records: Financial transaction history is retained for a minimum of 5 years for audit purposes, dispute resolution, and legal compliance.
  • Communication Records: Customer support logs are kept for 2 years for quality control and resolution of any service-related disputes.
  • Technical Data: Access logs and technical data are retained for 90 days for security and fraud detection purposes, after which they are deleted or anonymised.

Once the relevant retention period has expired, data is securely deleted using procedures that ensure it cannot be recovered.

All giga138 data storage servers are housed in certified data centres that comply with strict physical and digital security standards. Data backups are performed regularly and are also fully encrypted.

10  Policy Amendments

Giga138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. We are committed to notifying you of any material changes in a clear and timely manner.

  • Change Notification: If we make significant changes to this Privacy Policy, we will notify you via in-platform notifications, an email to your registered address, or a prominent notice on the giga138 homepage.
  • Effective Date: Each new version of the Privacy Policy will state its effective date. The current version takes effect from January 2026.
  • Continued Use: Your continued use of the giga138 platform after any amendments take effect constitutes your acceptance of the updated terms.
  • Older Version Archive: Previous versions of the Privacy Policy are available upon request from our support team for your reference.
We encourage you to review this Privacy Policy periodically. If you have any concerns about the changes made, please contact our support team before continuing to use the platform.

11  Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by giga138, our team is ready to assist you.

You can reach us through the following channels:

  • Live Chat: Available 24/7 directly within the giga138 platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for specific inquiries regarding personal data and player rights requests.
  • General Support: [email protected] — for any general inquiries related to your account and the platform.

Our Data Protection Team will endeavour to respond to all privacy-related enquiries within 5 business days and resolving more complex requests within the timeframe 14 business days.

Giga138 has a dedicated Data Protection Officer (DPO) appointed to oversee the platform's privacy compliance and ensure that player rights are fully respected.

Why Your Privacy Is Safe With Us

We do not merely comply with the law — we go beyond minimum requirements to ensure your data is genuinely protected.

Advanced Encryption

Every bit of data transmitted between your device and giga138 servers is protected by 256-bit SSL encryption — the same technology used by leading banks worldwide.

Secure & Trusted KYC

The giga138 identity verification process uses OCR technology and secure document validation, ensuring your KYC data is stored in an encrypted environment with restricted access.

PCI-DSS Payments

All financial transactions are processed through PCI-DSS certified payment gateways. Full card numbers never touch giga138 servers — they are processed directly by certified processors.

24/7 Threat Monitoring

Giga138's security monitoring system operates around the clock to detect and respond to any threats or suspicious activity before they can impact you.

No Data Sales

Giga138 has never and will never sell or rent players' personal data to advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you.

Periodic Independent Audits

The giga138 platform undergoes regular independent security and privacy audits by certified third parties, ensuring our data protection standards remain at the highest level.

Play Safe, Play with Confidence

Your privacy and security are guaranteed at giga138. Register now and enjoy the ultimate gaming experience with complete peace of mind.

256-bit SSL Protected Data
Secure & Trusted KYC
No Data Sales
Bahasa Melayu