Your privacy is no small responsibility. At mahjong138, every bit of data you share is rigorously protected using industry-grade security standards and in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Mahjong138 only collects information that is strictly necessary to provide you with a safe, fair, and efficient service. We do not collect excessive or irrelevant data beyond what the platform requires. The following are the categories of information we collect:
Most of the information we hold was provided directly by you during registration, KYC verification, profile setup, deposits or withdrawals, and when contacting our support team. We never request your personal information through unsolicited emails or direct messages.
When you use the mahjong138 platform – whether via the website or mobile app – our systems automatically record certain technical information such as your IP address, device type, browser used, and navigation patterns. This data is used solely for security, troubleshooting, and improving the user experience.
In certain situations, we receive information from registered and trusted third parties such as digital identity verification service providers, licensed payment processors, and fraud prevention service providers. All such third parties are bound by strict confidentiality agreements and may only use your data within the permitted scope.
Mahjong138 uses your personal data only for lawful, transparent purposes that are directly related to our services. Below is a summary of the primary purposes for which your data is used:
| Purpose of Use | Data Used | Processing Basis |
|---|---|---|
| Identity verification & KYC | Name, ID card, selfie photo | Contractual Necessity |
| Deposit & withdrawal processing | Financial information, bank account | Contractual Necessity |
| Security & fraud prevention | IP, activity logs, device | Legitimate Interests |
| Customer support | Email, phone, conversation records | Contractual Necessity |
| Legal compliance & AML | Transaction history, identity | Legal Obligations |
| Marketing & promotions (with consent) | Email, phone number | Member Consent |
| Product improvement & analytics | Usage data (anonymised) | Legitimate Interests |
Mahjong138 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Your data is shared only under strictly limited circumstances and with clear justification:
Third-party companies we engage to help operate specific aspects of the platform, such as payment processing, identity verification, cloud services, and security support. All such providers are bound by strict Data Processing Agreements (DPA) and may only access data required for their specific tasks.
We may disclose your information to relevant authorities when required by Malaysian law, court order, or in the context of criminal investigations such as anti-money laundering (AML). In such cases, we only disclose the minimum data strictly necessary.
In the event of a merger, acquisition, or sale of company assets, member data may be transferred as part of that process. We will notify members in advance and ensure that recipients are bound by data protection standards equivalent to or higher than our current privacy policy.
Protecting your personal data is an absolute priority for mahjong138. We continually invest in security infrastructure and follow industry best practices to ensure your data never falls into the wrong hands.
The technical measures we implement include:
Cookies are small text files stored on your device when you visit the mahjong138 website. They help us recognise you on return visits, save your preferences, and improve your overall experience. Without cookies, you would need to log in every time and many platform features would not work properly.
You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will significantly affect platform functionality. For mobile browsers, cookie settings can be accessed through your device's app settings menu.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold. mahjong138 is committed to facilitating the exercise of these rights without unnecessary obstacles:
Request a copy of the personal data we hold about you. We will process your request within 21 business days.
Update or correct inaccurate or outdated personal data via your profile settings or support.
Request deletion of your data, subject to any minimum statutory retention obligations we are required to comply with.
Object to the processing of your data for direct marketing purposes or in certain situations involving legitimate interests.
Request that we restrict the processing of your data in certain situations while a claim or investigation is ongoing.
Receive your personal data in a structured, machine-readable format for transfer to another platform.
Mahjong138 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:
Once the retention period expires, your data will be securely deleted using industry-standard methods (multiple overwrites or physical destruction for physical storage media).
The digital landscape is constantly evolving, and our privacy policy must evolve with it to reflect current best practices and relevant legal changes. mahjong138 reserves the right to amend this privacy policy from time to time.
Any changes that are material – meaning changes that materially affect how we use or protect your data – will be communicated to you via your registered email and in-platform notifications at least 14 days before those changes take effect. The "Updated" date at the top of this document will always reflect the latest version.
Continued use of the mahjong138 platform after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account and withdraw all funds before the changes take effect.
If you have any questions, concerns, or complaints about how mahjong138 handles your personal data, we encourage you to contact us directly first. We are committed to addressing every privacy issue seriously and within a reasonable timeframe.
We have a dedicated Data Protection Officer to handle all privacy-related inquiries. You can reach our privacy team via:
We aim to acknowledge all complaints within 3 business days and resolve issues within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Six core principles that guide how we handle member privacy and data security every day.
All your data – whether in transit or at rest – is protected with the same 256-bit AES SSL encryption used by leading banking institutions in Malaysia.
Mahjong138 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are protected by law, and we take each one seriously.
The "least privilege" principle means only staff who genuinely need access to your data to perform their duties are permitted to do so – and all access is fully logged.
Our privacy practices and security systems are independently reviewed by a third-party audit firm annually. Summary reports are available for interested members to review.
We only collect data that is strictly necessary for clearly defined operational purposes. No excessive data collection, no unnecessary profiling, and no selling of data to third parties.
In the unlikely event of a data breach affecting your personal information, mahjong138 is committed to notifying affected members within 72 hours.
Your data is safe, your identity is protected, and your rights are respected. That is mahjong138's promise to every member. Ready to get started?