Mitra138 Privacy Policy — Transparent and Responsible Personal Data Protection for Malaysia Members

1Introduction and Scope of the Privacy Policy

Welcome to the Mitra138 Privacy Policy. This document is designed to provide complete clarity and transparency to all members and users of our platform regarding how your personal data is handled — from the moment you first interact with mitra138.pro until you cease using our services.

Mitra138 operates with a full sense of responsibility towards user privacy. We recognise that your trust is the most valuable asset we hold, and we will never take lightly the trust you place in us when entrusting your personal data to this platform.

This Privacy Policy applies to all users who access or use the mitra138 platform via our website, mobile app or any other official service channel. It covers all types of personal data processing we carry out as a responsible data controller under Malaysian law.

2Types of Personal Data We Collect

Mitra138 collects various categories of personal data depending on the nature of your interaction with our platform. Below is a detailed table of data we may collect:

2.1 Data You Provide Directly

This includes all information you provide during account registration, the KYC verification process, customer support forms or any direct interaction with our platform. You are responsible for ensuring that all information provided is accurate and up to date.

2.2 Data Collected Automatically

When you browse or use the mitra138 platform, our systems automatically record certain technical information such as your IP address, device type, operating system and usage patterns. This data helps us detect security threats and continuously improve the overall user experience.

3How and Why We Use Your Personal Data

Mitra138 uses collected personal data solely for legitimate and transparent purposes. We do not process your data beyond the scope of the purposes stated here without first obtaining fresh consent from you.

• Account Management: Creating, operating, and maintaining your user account, and securely processing login requests.
• Transaction processing: Verifying and processing deposits, withdrawals, and all financial transactions on the platform.
• Identity verification (KYC): Fulfilling anti-money laundering (AML) and Know Your Customer (KYC) compliance obligations as required by law.
• Platform security: Detecting, investigating, and preventing fraud, multi-account usage, and any suspicious activity.
• Service improvement: Analysing usage patterns to improve platform features, user experience, and game offerings.
• Service communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate support.
• Marketing (with consent): Sending promotional offers and relevant bonus information — only to members who have given explicit consent.

4Data Sharing and Disclosure to Third Parties

Mitra138 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties to enable our platform to operate correctly and securely:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to handle specific functions such as payment processing, identity verification, hosting services and customer support. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes directed by mitra138.

4.2 Legal and Regulatory Requirements

Mitra138 may be required to disclose your personal data to government authorities, regulatory bodies, or law enforcement agencies when compelled to do so by applicable Malaysian law, court order, or in the course of an official investigation.

4.3 Platform Protection and Fraud Detection

In cases involving fraud, money laundering or serious security threats, mitra138 reserves the right to share relevant information with other platforms, parent companies or affiliated organisations for the purpose of mutual protection and prevention of financial crime.

5Data Security and Technical Protection Measures

Mitra138 continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. Our security approach is layered and comprehensive:

• Data encryption in transit: 256-bit SSL/TLS protects all data transmitted between your browser and the Mitra138 server.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using robust AES-256 encryption algorithms.
• Role-based access control: Only authorised personnel with a legitimate business need may access member personal data — with a full audit log maintained for every access.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity in real time.
• Regular penetration testing: mitra138 conducts regular security testing by independent cybersecurity experts to identify and patch vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of account protection.

6Cookies, Analytics and Tracking Technologies

Mitra138 uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. The following are the types of cookies we use:

6.1 Essential Cookies (Required)

These cookies are required for core platform functions such as login session management, account security, and proper content display. Without them, the platform cannot function correctly and they cannot be disabled.

6.2 Performance and Analytics Cookies

We use analytics tools to understand how members interact with our platform — which pages are visited most, how long sessions last and where users encounter difficulties. This data is used in aggregate and without individual identification to improve the overall platform experience.

6.3 Cookie Management

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the mitra138 platform. Your cookie preferences will be remembered and respected in future sessions.

7Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights that Mitra138 is committed to upholding:

To exercise any of the above rights, please contact the Mitra138 data protection team via 24/7 live chat or our official email. Requests will be processed within 14 business days and we may need to verify your identity before proceeding to ensure the security of your data.

8Children's Data Protection

Mitra138 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal data of individuals under the age of 18.

Should we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and terminate the associated account. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact our support team immediately.

9Cross-Border Data Transfers

In the course of its operations, mitra138 may need to transfer your personal data to servers or service partners operating outside Malaysia. Any such data transfer is carried out with adequate safeguards in place, including:

• Data processing agreement compliant with internationally recognised data protection standards.
• Ensuring that recipient countries maintain a level of data protection equivalent to or exceeding Malaysia's standards.
• Use of approved standard contractual clauses to ensure continuous protection of your data wherever it is processed.

10Personal Data Retention Period

Mitra138 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or for as long as required by applicable Malaysian laws and regulations. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active and for 5 years after account closure for compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends, in accordance with AML/CFT legal provisions.
• Support communication logs: Retained for 2 years for quality assurance and dispute resolution purposes.
• Technical data and system logs: Retained for 12 months for security and incident investigation purposes.

Once the designated retention period has elapsed, your data will be securely deleted using methods that ensure it cannot be recovered or accessed again.

11How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist. We are committed to responding to every privacy inquiry seriously and within a reasonable timeframe.

You can reach us via:

• Live Chat 24/7: The fastest channel — our team is available around the clock via live chat within the Mitra138 platform.
• Privacy Email: [email protected] — for privacy inquiries requiring detailed clarification.
• General Support Email: [email protected] — for general account and service inquiries.

We aim to respond to all privacy inquiries within 3 working days and resolve all data rights requests within 14 working days from the date the request is received.

12Privacy Policy Amendments and Updates

Mitra138 reserves the right to update or amend this Privacy Policy from time to time in line with changes in legislation, industry practices, or platform operational requirements. Whenever a material amendment is made, we will:

• Displaying a clear notice on our platform's home page for at least 7 days before the changes take effect.
• Sending notifications via email to the address registered on your account.
• Updating the "Effective Date" field at the top of this document.
• Retaining previous versions of this Privacy Policy for your reference when needed.

Continued use of the mitra138 platform after the effective date of any Privacy Policy amendment will be considered as your acceptance of the updated policy. If you do not agree with the amendments, you have the right to close your account and cease using the platform.