hero138 DATA PROTECTION DOCUMENT

Hero138 Privacy Policy – Personal Data Protection for Malaysian Members

At hero138, your privacy is more than a legal obligation — it is a core value. This document clearly outlines how we collect, use, store, and protect your personal data.

Last Updated: 1 July 2026
Version 3.1 PDPA Compliance
Sections in This Policy
01Data Collection
02Use of Information
03Storage & Security
04Data Sharing
05Cookies & Tracking
06Your Rights
07Minors & Warnings
08Amendments & Contact Us
Our Privacy Commitment

Hero138's Six Pillars of Data Protection

We do not merely comply with the law — we go further to ensure every member's privacy is fully protected.

🔐
256-bit SSL Encryption

All data transmitted between your device and hero138's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.

🚫
No Data Sales

Hero138 has never sold, rented, or traded members' personal data to any third party for marketing or any other purpose — and never will.

🗂️
Minimum Data Collection

We only collect data that is genuinely necessary to provide you with the best service. No data is collected in excess or without clear justification.

Malaysia PDPA Compliance

Hero138's privacy policy is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are fully recognised and respected.

🔍
Full Transparency

We are always transparent about how your data is used. Any changes to this privacy policy will be communicated to you via the hero138 platform.

🛡️
Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. We take every such request seriously.

Introduction to hero138's Privacy Policy

Hero138 is committed to protecting the privacy of all its members in Malaysia. This Privacy Policy details how we manage your personal data when you use the platform, register as a member, make deposits or withdrawals, or interact with our support team.

By using the hero138 platform, you agree to the collection and use of information as described in this document. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

01

Types of Personal Data We Collect

Hero138 collects your personal data through several channels as you use our platform. Below are the types of data collected and the purposes for which they are used:

Data Category Sample Information Purpose of Collection
Identity Data Full name, date of birth, identification card number Identity verification (KYC), fraud prevention
Contact Data Phone number, email address Account communications, transaction notifications
Financial Data Bank account details, eWallet numbers (TnG, GrabPay, DuitNow) Deposit & withdrawal processing
Usage Data Games played, betting history, login timestamps Service improvement, responsible gaming
Technical Data IP address, device type, web browser Platform security, fraud detection
ℹ️
Important Note: hero138 does not collect sensitive data such as medical information, religious beliefs, or political affiliations. We only collect information that is strictly necessary to operate the platform safely and efficiently.
02

How We Use Your Information

Personal data collected by hero138 is used solely for legitimate purposes that are clearly communicated to you. The following are the primary purposes for which your data is used:

  • Account management: Creating, maintaining, and securing your hero138 account. This includes identity verification, password recovery, and monitoring for suspicious activity.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and handling your withdrawal of winnings securely and accurately.
  • Service provision: Gives you access to all hero138 games, including slots, Malaysia Super League and EPL football betting, badminton, e-sports, live casino, and progressive jackpots.
  • Service communications: Sending important transaction notifications, account security alerts, and policy updates relevant to your use of the platform.
  • Marketing (with your consent): Sending information about hero138 promotions, bonuses, and special offers — but only if you have given consent to receive marketing communications.
  • Legal compliance: Meeting legal requirements including KYC procedures, anti-money laundering (AML) compliance, and reporting obligations required by the authorities.
  • Platform enhancements: Analyses usage patterns in aggregate (without identifying individuals) to improve the quality of the hero138 platform for all users.
💡
Right to Opt Out: You may opt out of marketing communications from hero138 at any time by contacting our support team or clicking the "unsubscribe" link in any email we send you.
03

Data Storage & Security Measures

Hero138 takes data security very seriously. The following are the measures we take to ensure your personal data remains protected at all times:

  • End-to-end encryption: All data transmitted between your device and hero138's servers is protected with TLS 1.3 protocol and 256-bit SSL encryption.
  • Secure servers: Your data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls.
  • Restricted access: Only trained hero138 staff with a legitimate business need are permitted to access members' personal data. All access is logged and monitored.
  • Regular backups: Data is backed up regularly to secure locations to ensure service continuity under all circumstances.
  • Retention period: hero138 retains your personal data for as long as necessary for service purposes or as required by law — typically no longer than 7 years after account closure.
⚠️
In the Event of a Data Breach: Should hero138 detect any security breach that may affect your personal data, we will notify you and the relevant authorities within the timeframe stipulated under Malaysia's PDPA.
04

Data Sharing with Third Parties

Hero138 fully respects your privacy. We does not sell, rent, or trade your personal data. However, in the following limited circumstances, we may need to share your data:

  • Payment service providers: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the necessary transaction details are shared with the relevant payment processor for verification purposes only.
  • Game providers: Game providers such as Pragmatic Play, PG Soft, and Microgaming may receive account information required to run games correctly. They are bound by strict confidentiality agreements.
  • Legal authorities: hero138 will disclose personal data when required to do so by court order, criminal investigation, or other lawful legal requirements in Malaysia.
  • Fraud prevention: Where we suspect fraud, money laundering, or other illegal activity, relevant information may be shared with the appropriate authorities.
📋
All third parties who receive your data are bound by strict data protection agreements and are not permitted to use that information for any purpose other than what has been specified.
05

Cookies & Tracking Technologies

Hero138 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

  • Essential cookies: Required for the platform to function properly. This includes login session cookies, security cookies, and language preference cookies. Disabling these cookies will affect platform functionality.
  • Performance cookies: Collects anonymised information on how you use the platform to help us improve performance and user experience.
  • Functionality cookies: Remembers your preferences — such as favourite game types, display settings, and other choices — to deliver a more personalised experience.
  • Security cookies: Monitors unusual access patterns to prevent unauthorised account access and protect the platform against cyber attacks.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some areas of the hero138 platform.

06

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

👁️
Right of Access
You are entitled to a copy of the personal data we hold about you at any time.
✏️
Right to Rectification
You may request corrections to any data that is inaccurate or incomplete.
🗑️
Right to Erasure
You may request the deletion of your personal data, subject to any legal retention requirements.
🚫
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
📦
Right to Data Portability
You may request your data in a machine-readable format for transfer.
⏸️
Right to Restrict Processing
You may request a restriction on the processing of your data under certain valid circumstances.
📬
How to Submit a Request: To submit any request relating to your data rights, contact the hero138 data protection team by email at privacy@hero138.ws or via the platform's live chat. We will process your request within 30 days.
07

Child Protection

Hero138 takes the protection of minors extremely seriously. Our platform is not intended for individuals under the age of 18 under any circumstances.

We do not knowingly collect personal data from minors. Should we discover that data has been collected from an individual under the age of 18, we will promptly delete that data and close the account in question.

Parents or guardians who suspect their child has registered on hero138 are urged to contact us immediately at support@hero138.ws so that prompt action can be taken.

🔞
Reminder: hero138 applies an age verification process at registration and during the KYC process. Any individual found to have provided false age information to register will have their account terminated immediately upon confirmation.
08

Policy Amendments & Contact Us

Hero138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The date of the most recent update is always displayed at the top of this page.

For any material changes, we will notify you via email or an in-platform notification on hero138 before the changes take effect. Continued use of the platform after any amendments constitutes your acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding your data privacy at hero138, please contact us:

💬
Live Chat
Available 24/7 on the hero138 platform
📧
Privacy Email
privacy@hero138.ws
📋
General Support
support@hero138.ws
🔒

Your Data Is Safe with hero138

Your privacy is always protected at hero138. Register with confidence — your data is handled with full transparency, security, and integrity. Join over 500,000 members in Malaysia today!

256-bit SSL protected data Malaysia PDPA Compliance No data selling Your data, your control
Bahasa Melayu