Personal Data Protection Policy

Elang138 Privacy Policy – Your Data is Secure With Us

Elang138 treats the privacy of every Malaysian member as a responsibility to be taken seriously. Find out exactly how we collect, use and protect your information.

Last updated: 1 July 2026 | Language: Bahasa Melayu (ms-MY) | Compliance: Malaysia PDPA 2010

Elang138's Commitment to Malaysian Member Privacy

When you register and use the platform elang138, you are entrusting us with your personal information. That trust is not something we take lightly. This Privacy Policy was written not merely to satisfy legal requirements – it was written because we genuinely want you to have a clear understanding of what happens to your data every time you interact with the platform elang138.

This document provides a detailed explanation of what personal data elang138 collect, why we need it, how it is used, who it may be shared with in limited circumstances, and what rights you hold as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA 2010). This Policy applies to all services provided under https://elang138.click and any associated applications or services.

By using the platform elang138, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact the support team elang138 if you would like to learn about the options available to you.

01
Introduction & Scope of This Privacy Policy

elang138 is the data controller responsible for processing the personal data of members using the platform at https://elang138.click. As data controller, we are responsible for ensuring that all personal data we hold is processed in accordance with the principles set out under Malaysia's PDPA 2010 and international industry best practices.

This Privacy Policy covers all aspects of data collection and processing related to:

  • Registration and management of elang138 member accounts.
  • Betting and gaming activity across all elang138 platform categories – Live Casino, baccarat, table games, e-sports, sports, virtual sports and lottery.
  • Financial transactions including deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as fund withdrawals.
  • Communications between members and the elang138 team via live chat, email and WhatsApp.
  • General use of the elang138 website and mobile application.
Important: This Privacy Policy applies solely to the elang138 platform. Links or references to other websites or services you may access through elang138 are not covered by this policy — please review the respective third-party privacy policies separately.
02
Types of Personal Data We Collect

elang138 only collects data that is strictly necessary to deliver our platform services. The categories of data we collect are as follows:

Data Category Example Information Status
Identity Data Full name, MyKad number, date of birth, gender Mandatory
Contact Data Malaysian phone number, email address, residential address Mandatory
Financial Data E-wallet account name, deposit & withdrawal records, transaction history Mandatory
Gaming Activity Data Betting history, game type, total wins/losses Automatic
Technical Data IP address, device type, web browser, operating system Automatic
Usage Data Pages visited, session duration, features used Automatic
Communications Data Live chat records, support emails, WhatsApp logs Optional

elang138 does not directly collect credit/debit card numbers or sensitive banking information — all financial transactions are processed through secure third-party payment gateways such as Touch 'n Go, GrabPay and DuitNow processors. Data transmitted to these processors is protected by their own security standards.

03
How We Collect Your Data

Your personal data is collected by elang138 through any of the following:

  • Directly from you: When you complete the elang138 account registration form, submit identity verification (KYC) documents, make a deposit or withdrawal, contact our support team, or fill in any form on our platform.
  • Automatically: When you use the elang138 platform, automated tracking technologies such as cookies, web beacons and server logs record technical information and your usage patterns. This includes your IP address, device type, access times and pages visited.
  • From third parties: In certain circumstances, elang138 may receive your data from third-party identity verification service providers when you undergo the KYC process, or from payment processors when you carry out a financial transaction.
Please Note: elang138 does not purchase or acquire personal data lists from any data brokers or third-party sources for marketing purposes. All data we hold is collected lawfully through your direct interactions with the elang138 platform.
04
How Your Personal Data is Used

elang138 uses collected personal data solely for the following legitimate and stated purposes:

  • Account Management: Creating and managing your member account, including identity verification, password setup and profile maintenance.
  • Service Delivery: Processing bets, managing financial transactions, crediting winnings and providing access to all games on the elang138 platform.
  • Verification & Security: Verifying age and identity, and preventing fraud, money laundering and unauthorised access to elang138 accounts.
  • Customer Support: Responding to enquiries and resolving complaints via live chat, email and WhatsApp.
  • Platform Improvements: Analysing usage patterns to improve the user experience, identify technical issues and develop new features relevant to Malaysian players.
  • Service Communications: Sending important notifications about your account, changes to terms, security updates and draw information or results relevant to your activity.
  • Marketing Communications: Sending information about elang138 promotions, bonuses and offers – only if you have agreed to receive such communications. You may unsubscribe at any time.
  • Legal Compliance: Meeting applicable Malaysian legal obligations, including anti-money laundering (AML) reporting requirements and customer verification.

elang138 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

05
Data Sharing with Third Parties

Policy elang138 is to never sell, rent or share members' personal data with third parties for their own commercial purposes. However, in the following limited circumstances, elang138 may share your data with certain parties:

  • Service Providers: Companies we engage to support platform operations — including payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), KYC service providers, cloud service providers and game providers. They may only process your data in accordance with elang138's instructions and are not permitted to use it for any other purpose.
  • Malaysian Authorities: Where required by applicable Malaysian law, court order, or investigation by Malaysian law enforcement agencies such as PDRM, SPRM, or Bank Negara Malaysia in relation to suspicious activities.
  • Business Acquisition: In the event of a merger, acquisition or sale of elang138 assets, member data may be transferred to the receiving entity — subject to the same confidentiality obligations.

In all of the data sharing situations described above, elang138 ensuring that the recipient parties have adequate data protection measures in place and only use the data for specific, legitimate purposes.

Guarantee: elang138 does not share your gambling activity information or betting history with any third party except where specifically required by applicable Malaysian law.
06
Data Security Measures at elang138

elang138 continuously invests in security technologies and procedures to protect members' personal data from unauthorised access, disclosure, alteration or destruction. Key security measures we have implemented include:

  • 256-bit SSL Encryption: All communications between your device and elang138's servers are encrypted using 256-bit TLS/SSL — the same standard used by Malaysia's major banks such as Maybank and CIMB.
  • Secure Password Storage: elang138 account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store passwords securely.
  • Two-Factor Authentication (2FA): elang138 members are encouraged to enable 2FA for an added layer of security that prevents unauthorised access even if your password has been compromised.
  • Active Monitoring: elang138's security monitoring system operates 24/7 to detect and respond to suspicious activity or intrusion attempts in real time.
  • Internal Access Controls: Access to member data within the elang138 organisation is restricted to staff who require it for their specific job functions, in accordance with the principle of least privilege.
  • Secure Servers: Member data is stored in secure data centres with robust physical and digital safeguards, including disaster recovery and regular data backups.

Although elang138 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data breach affecting your information, elang138 is committed to notifying you promptly in accordance with Malaysian legal requirements.

07
Personal Data Retention Period

elang138 only retains your personal data for as long as it is needed for the purpose it was collected, or as required by applicable Malaysian law. The general data retention guidelines are as follows:

  • Active account data: Retained for as long as your elang138 account remains active and for a reasonable period after account closure for customer service purposes.
  • Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • Customer support communication logs: Retained for 3 years for the purposes of dispute resolution and service improvement.
  • Technical data and server logs: Typically retained for 12 months for system security and debugging purposes.
  • Identity verification (KYC) document data: Retained for the period required under Malaysian AML laws, typically a minimum of 5 years after the business relationship ends.

Once the applicable retention period has expired, elang138 will securely delete or anonymise your data using methods that ensure it cannot be recovered.

08
Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you have the following rights regarding your personal data held by elang138:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request a correction if your personal data is inaccurate, incomplete or out of date.
  • Right to Withdraw Consent: You may withdraw your consent to certain data processing at any time, including opting out of receiving marketing communications from elang138.
  • Right to Object: You may object to the processing of your data for specific purposes, including direct marketing.
  • Right to Complain: You have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe your privacy rights have been violated.

To exercise any of the rights above, please contact elang138 via email to support@elang138.click, clearly stating your request. We will respond within 21 working days from the date the request is received. In certain circumstances, we may require additional identity verification before fulfilling your request, to safeguard the security of your data.

Note: The above rights are subject to certain limitations set out under Malaysia's PDPA 2010. For example, the right of access may be restricted where it involves another person's data or where disclosure would conflict with elang138's legal obligations.
09
Cookies, Pixels & Tracking Technologies

Platform elang138 uses cookies and similar tracking technologies to enhance the user experience and analyse usage patterns. The types of cookies used on elang138 are:

  • Essential Cookies: Required for the elang138 platform to function correctly — including login session cookies, CSRF security and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects information about how you use elang138 — the most frequently visited pages, page response times and any error messages. This information is used solely to improve platform performance.
  • Functional Cookies: Remembering your preferences such as selected language, RM currency denomination and display settings to personalise your experience on elang138.
  • Analytics Cookies: Helps elang138 understand how Malaysian players interact with the platform so we can make better development decisions.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the platform. elang138 as a whole and prevent you from logging in or completing transactions smoothly.

10
Links to Third-Party Services

Platform elang138 may contain links to third-party services such as payment processors (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) and game providers. Once you click those links and leave the elang138 platform, this Privacy Policy no longer applies.

Every payment processor and third-party service provider that works with elang138 have their own privacy policies. elang138 is not responsible for the privacy practices or content of those third-party websites. We recommend that you review their privacy policies before providing any personal information directly to them.

However, we ensure that all third-party service providers we engage in elang138's operations comply with strict data security standards and process member data only in accordance with the instructions and contractual requirements set by elang138.

11
Children's Privacy

Platform elang138 is intended exclusively for adults aged 18 and above. We do not knowingly collect or process the personal data of children under the age of 18.

If we find that personal data belonging to a child under 18 has been collected without our knowledge – for example through registration using false information – we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian and believe your underage child has registered for or accessed the elang138, please contact us immediately at support@elang138.click so we can take the appropriate action without delay.

12
Contact Us & Privacy Policy Amendments

Policy Amendments: elang138 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable Malaysian legal requirements or service improvements. Members will be notified of any material changes via in-platform notifications on elang138 and by email to their registered address. The latest version of this policy is always available on this page with a clearly indicated update date.

Contact the elang138 Data Privacy Officer: If you have any questions or concerns, or wish to exercise your privacy rights, please reach out to us through the following channels:

  • Email: support@elang138.click – for official requests related to personal data
  • Live Chat: Within the elang138 platform – for general privacy enquiries
  • WhatsApp: Available 24/7 for immediate assistance

We are committed to responding to all privacy-related enquiries within 21 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP) at pdpa.com.my.

Malaysia PDPA 2010 Compliance Commitment

Elang138 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). All processing of members' personal data is carried out on a lawful basis, and we respect the rights of every data subject. For PDPA-related enquiries, contact support@elang138.click.

Your Privacy Rights at elang138

Six important rights you hold as an elang138 member under Malaysia's PDPA 2010 – and how to exercise them.

Right to Data Access
You have the right to request and receive a copy of all personal data that elang138 holds about you. Submit your request to support@elang138.click and we will respond within 21 working days with a complete data report.
Right to Correction
If any personal data that elang138 holds about you is inaccurate, outdated or incomplete, you have the right to request a correction. Log in to your elang138 account to update your profile information, or contact support for changes that require verification.
Right to Withdraw Consent
You may withdraw consent for certain data processing at any time – in particular for marketing communications from elang138. Use the unsubscribe link in our emails or update your notification preferences in your elang138 account settings.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes by elang138 at any time. Once an objection is received, elang138 will cease processing your data for that purpose without undue delay.
Right to Restrict Processing
In certain circumstances, you may request that elang138 restrict the processing of your personal data – for example, while you are disputing the accuracy of the data or while an objection regarding how the data is being used is under review.
Right to Lodge a Complaint
If you believe elang138 has violated your privacy rights, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP). We encourage you to contact us first at support@elang138.click so we can resolve the matter promptly.

How elang138 Protects Your Personal Data

Six layers of protection we use to keep every Malaysian member's data safe on the elang138 platform.

256-bit SSL Encryption
Every bit of data travelling between your phone or computer and elang138's servers is encrypted with 256-bit TLS/SSL – the same standard used by Malaysia's major banks. No one can intercept or read your data while it is in transit.
Two-Factor Authentication
The 2FA provided by elang138 adds an extra layer of security to your account – even if someone knows your password, they will still need the OTP code sent to your phone to log in. Enable 2FA today in your elang138 account settings.
Secure Data Storage
elang138 member data is stored in data centres protected by strict physical and digital access controls. Data backups are performed regularly, and our disaster recovery procedures ensure your data will not be lost under any emergency circumstances.
24/7 Threat Monitoring
elang138's security monitoring system operates around the clock to detect suspicious access patterns, failed login attempts and any anomalies in account activity. Automated responses and our security team act swiftly against any threats.
PDPA 2010 Compliance
elang138 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) across all data processing operations. We conduct regular compliance reviews and seek legal counsel to ensure our policies remain current with the latest PDPA requirements.
Internal Access Controls
Not all elang138 staff have access to members' personal data. Access rights are restricted based on job requirements under the principle of least privilege — ensuring your data is only visible to those who genuinely need it for a specific task.
0 SSL Encryption
0 Privacy Policy Sections
0 Request Response Time
0 Security Monitoring

Questions About elang138's Privacy Policy

No, elang138 never sells, rents or shares members' personal data with any third party for their own commercial purposes. Your data may only be shared in very limited circumstances — with service providers that support our platform operations (such as payment processors Touch 'n Go, GrabPay or DuitNow) who are bound by strict confidentiality obligations, or when required by Malaysian law such as a court order or an MACC investigation. In all data-sharing cases, we ensure that the receiving party upholds high data protection standards.

To request a copy of the personal data elang138 holds about you, send an email to support@elang138.click with the subject line "PDPA Data Access Request" along with your full name and elang138 account number. We may require additional identity verification before processing the request to safeguard your data. The elang138 team will respond within 21 business days with full details of the data we hold, the purposes of processing and the retention period. No fee is charged for the first request made within any 12-month period.

You may request deletion of your personal data by closing your elang138 account and submitting a written request to support@elang138.click. However, this right to erasure is subject to certain limitations — elang138 is legally required under Malaysian law to retain specific financial and transaction records for a minimum of 7 years in compliance with accounting and anti-money laundering regulations. Data that must be retained for legal purposes cannot be deleted even upon your request. All other data not subject to a legal retention obligation will be deleted or anonymised within a reasonable period after your request has been processed.

While elang138 takes all reasonable steps to prevent data breaches, we have a comprehensive incident response plan in place should such an event occur. The first step is to contain the breach and assess the extent of the damage. We will then notify all affected members via email and in-platform notifications within the timeframe required by Malaysian law. The incident will also be reported to the relevant Malaysian authorities in accordance with PDPA 2010 requirements. Affected members will receive guidance on steps they can take to protect themselves, including advice on changing passwords and monitoring their financial accounts.

When you use Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX for deposits or withdrawals on elang138, transactions are processed through a secure payment gateway. elang138 does not directly store your full e-wallet account number or sensitive banking details – we only retain the information needed to identify your payment method for withdrawal purposes, such as the account holder's name and last 4 digits. All financial data related to transactions is encrypted and protected. Transaction records are kept for the period required by Malaysian law solely for compliance and dispute resolution purposes if needed.

Your Data Is Safe – Join elang138 with Confidence

Over 500,000 Malaysian players trust elang138 not only for an enjoyable gaming experience, but also for serious, professional privacy protection.

By registering, you agree to the Terms & Conditions and elang138's Privacy Policy. This platform is intended for individuals aged 18 and above only.

Bahasa Melayu