Privacy Policy

This Privacy Policy ("Policy") is issued by Dolar138 ("Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who access or use the website located at https://dolar138.cam and all services, features, and gaming products made available through it.

Dolar138 is an online entertainment platform serving players primarily based in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. We operate under an international gaming licence and are subject to data handling obligations imposed by our licensing authority. We are committed to processing personal data lawfully, transparently, and with full respect for your rights as an individual.

By registering an account, making a deposit, or otherwise using any part of the dolar138 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means dolar138, which determines the purposes and means by which personal data is processed.
• "Data Processor" means a third party that processes personal data on behalf of dolar138, subject to a data processing agreement and our instructions.
• "KYC" (Know Your Customer) means the identity verification process required by dolar138 prior to the processing of any withdrawal request.
• "Cookies" means small text files placed on a user's device by a website to store session data, preferences, or analytical tracking identifiers.
• "Special Category Data" means personal data that reveals racial or ethnic origin, political opinion, religious belief, health information, biometric data, or other sensitive categories as recognised under applicable data protection law.

Dolar138 collects only the minimum personal data necessary to operate your account, comply with our legal and licensing obligations, and deliver the Platform services to you. The categories of personal data we collect are set out below.

Dolar138 collects personal data through the following means:

4.1 Direct Interactions

You provide personal data to us directly when you register an account, complete our KYC verification process, make a deposit or withdrawal, contact our support team via live chat or email, participate in a promotion, or update your account settings. This is the primary source of your personal data held by dolar138.

4.2 Automated Technical Collection

As you interact with the Platform, we automatically collect certain Technical Data including your IP address, browser and device information, referring URL, pages visited, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies. See Section 10 for our full Cookies policy.

4.3 Third-Party Sources

In limited circumstances, we may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers engaged to verify the authenticity of documents you submit.
• Payment processing partners (e.g., FPX, DuitNow, e-wallet providers) who confirm the status of your transactions.
• Fraud prevention and anti-money-laundering databases operated by authorised third parties.
• Responsible gambling self-exclusion registers, where you have registered your details with a recognised multi-operator exclusion scheme.

Dolar138 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is required to perform our obligations under the account agreement with you — including operating your account, processing deposits and withdrawals, and providing access to gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC identity verification obligations imposed under our international gaming licence, and anti-money-laundering (AML) reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests, including Platform security and fraud prevention, responsible gambling monitoring, improving Platform performance, and maintaining the integrity of our gaming environment — provided that these interests are not overridden by your rights and interests.
• Consent: For certain non-essential processing activities, including marketing communications and optional personalisation features, we will seek your explicit consent. You may withdraw consent for any consent-based processing at any time by updating your account preferences or contacting our support team.

Dolar138 uses the personal data we hold about you for the following purposes:

• To create, manage, and maintain your dolar138 account, including verifying your identity and eligibility to use the Platform.
• To process deposits and withdrawals in MYR via your nominated payment method, whether DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, or other supported channels.
• To enforce the 21+ age restriction and prevent access by minors.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other illegal or prohibited activities.
• To monitor your gaming behaviour for responsible gambling purposes, including identifying potential problem gambling patterns and applying responsible gambling tools where appropriate.
• To provide customer support and resolve disputes or complaints.
• To send transactional communications regarding your account, deposits, withdrawals, and bonuses.
• To send marketing communications where you have provided your consent to receive them, and subject to your ability to opt out at any time.
• To comply with our obligations under applicable gaming, financial services, and data protection law and regulations.
• To improve and develop Platform features, fix technical issues, and optimise user experience.

Dolar138 does not sell your personal data to any third party. We share your personal data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to assist in delivering the Platform's services. These providers act as Data Processors under our instruction and are contractually bound to process data only as directed by dolar138, to maintain appropriate security standards, and not to use the data for any independent purpose. Service provider categories include: identity verification and KYC providers, payment processing and banking partners, cloud infrastructure and hosting providers, customer support software providers, analytics and platform performance monitoring tools, and responsible gambling technology providers.

7.2 Regulatory and Legal Disclosure

Dolar138 may be required to disclose personal data to regulators, law enforcement agencies, courts, or other governmental bodies in response to a lawful request, court order, or legal process. Where permitted by law, we will notify you of such a request before complying.

7.3 Anti-Money-Laundering Reporting

Where dolar138 identifies suspicious financial activity that may constitute money laundering, terrorist financing, or related offences, we are legally obligated to report the matter to the appropriate authority under our international licensing requirements. Such reports may involve disclosure of your personal data without prior notification to you.

7.4 Business Transfers

In the event of a merger, acquisition, asset sale, or reorganisation of all or part of the dolar138 business, personal data held by us may be transferred to the relevant acquiring entity as part of that transaction. Any such transfer would be subject to appropriate confidentiality and data protection obligations.

Dolar138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with our legal, regulatory, and licensing obligations. The following general retention guidelines apply:

• Account Data and KYC Records: Retained for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the communication, or longer where the communication relates to an ongoing dispute or legal matter.
• Technical and Log Data: Typically retained for twelve (12) months for security and fraud detection purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with applicable consent requirements.

Following the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

Dolar138 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dolar138 Platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar.
• Encryption at Rest: Sensitive data fields, including financial data and identity documents, are encrypted at rest in our storage systems.
• Access Controls: Access to personal data within our organisation is strictly limited to personnel who require it to perform their authorised functions, subject to role-based access controls and multi-factor authentication requirements.
• Regular Security Audits: We engage independent security professionals to conduct periodic penetration testing and vulnerability assessments of our Platform infrastructure.
• Incident Response: Dolar138 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

Dolar138 uses cookies and similar tracking technologies to operate the Platform effectively, improve your experience, and monitor Platform performance. Cookies are small text files placed on your device by the Platform when you visit. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These enable core functionality such as user authentication, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Allow the Platform to remember your preferences and personalisation choices (e.g., language settings, preferred game categories) between sessions.
• Analytics Cookies: Used to collect anonymised data about how users navigate the Platform, including pages visited, session duration, and feature usage. This data helps us improve the Platform's performance and usability.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and other abuse of the Platform.

You may control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform and your overall experience. Strictly necessary cookies cannot be disabled as they are essential to Platform operation.

Subject to applicable data protection law and the limitations imposed by our legal and regulatory obligations, you have the following rights with respect to your personal data held by dolar138:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. Note that this right is subject to overriding legal obligations — for example, we are required by our licensing terms to retain KYC and transaction records for a minimum period regardless of any erasure request.
• Right to Restriction of Processing: You may request that we restrict our processing of your personal data in certain defined circumstances, for example whilst the accuracy of the data is under dispute.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to us in a structured, machine-readable format, and to have that data transferred to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Privacy team by email at the address listed in Section 15. We will respond to your request within a reasonable time and in any event within thirty (30) days of receipt, unless the complexity of the request requires an extension of up to an additional sixty (60) days, in which case you will be notified.

Dolar138 is strictly an adults-only platform. Access to real-money gaming services is prohibited for individuals under the age of 21. We do not knowingly collect personal data from individuals below the age of 21. If you are a parent or guardian and believe that a minor has registered an account on the Platform or provided us with their personal data, please contact our support team immediately at the address in Section 15.

Upon notification or discovery that personal data has been collected from an individual below the age of 21, dolar138 will take immediate steps to suspend the relevant account, investigate the matter, and permanently delete the personal data of the minor from our systems, subject to any overriding legal obligations.

The dolar138 Platform integrates with a number of third-party services to deliver its features, including game providers (e.g., Evolution Gaming, PG Soft, Pragmatic Play, Habanero), payment processors (e.g., DuitNow, FPX, Touch 'n Go eWallet), analytics tools, and customer support software. These third-party services operate under their own independent privacy policies, and dolar138 is not responsible for the data practices of these providers in relation to data they collect independently.

Where dolar138 shares your personal data with a third-party Data Processor, we do so only pursuant to a written data processing agreement that imposes appropriate data protection obligations on that provider and restricts their use of your data to the purposes specified by dolar138.

The dolar138 Platform does not contain links to third-party websites operated by parties unrelated to our gaming and payment infrastructure. If the Platform ever links to external resources, such links are provided for informational purposes only, and dolar138 accepts no responsibility for the privacy practices or content of such external sites.

Dolar138 reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in applicable law, our licensing requirements, our data processing practices, or the services we offer. The updated Policy will be published on this page with a revised "Last Updated" date prominently displayed at the top.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — we will endeavour to notify registered players via email or an in-platform notification prior to the changes taking effect. For non-material updates, we rely on you to review this page periodically.

Your continued use of the dolar138 Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated Policy and your consent to its terms, to the extent that your consent is required by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data we hold about you, or your rights as a data subject, please contact our Privacy and Support team using the details below. We are available 24 hours a day, seven days a week to assist you.

When submitting a data subject rights request, please include your registered account username and a clear description of your request. For identity verification purposes, we may ask you to provide proof of identity before we process a request to access, correct, or delete your personal data.