Privacy Policy giga138 — Your Data, Our Responsibility

Giga138 is an online entertainment betting platform operating under the domain giga138.vin. We place great importance on user trust and recognise that the privacy of personal data is a fundamental right of every individual using our services.

This Privacy Policy is designed to clearly and transparently inform you about every aspect of how personal data is handled at giga138 — from the types of information we collect and how it is used, to your rights as the owner of that data.

We comply with the data protection principles established under Malaysia's Personal Data Protection Act 2010 (PDPA). This means every action involving user data at giga138 is carried out with care, responsibility, and with users' best interests as our top priority.

If you have any questions or concerns about this Privacy Policy, you may contact the giga138 support team via the 24/7 live chat available in the platform or by email at [email protected].

Giga138 collects your personal information through several means — during registration, during platform usage, and through automated technologies such as cookies. The following is a detailed list of the types of data we collect:

We does not collect sensitive information such as health data, religious beliefs, or political views unless specifically required by applicable law. Each data category is collected for a legitimate purpose and limited to the operational needs of the platform only.

Every piece of data we collect is used for a specific and legitimate purpose. giga138 never uses user data for purposes outside the scope stated below:

• Account Management: To create, verify, and maintain user accounts; ensuring each user holds only one active account.
• Transaction Processing: To process deposits, withdrawals, and bonus payments accurately and promptly to the correct bank account or digital wallet.
• Identity Verification (KYC): To ensure compliance with anti-money laundering (AML) legal requirements and to verify that users meet the minimum age requirement of 18 years.
• Platform Security: To detect and prevent fraud, hacking, multiple-account usage, and unauthorized bot or automation activity.
• Service Communications: To send important account-related notifications, security alerts, terms updates, and relevant promotional information.
• Platform Improvement: To analyze usage patterns in an aggregated and anonymous manner to improve user experience, platform speed, and the variety of games offered.
• Legal Compliance: To comply with court orders, requests from lawful authorities, or reporting obligations under Malaysian law.

Giga138 invests seriously in security infrastructure to ensure your personal data is always protected from cyber threats, data breaches, and unauthorised access. The technical security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser and giga138 servers are protected by 256-bit SSL encryption. This ensures no third party can intercept or read the data transmitted.
• Data Encryption at Rest: Sensitive information such as passwords and financial data is stored in encrypted form (encrypted at rest) using the industry-standard AES-256. Your password is never stored in plain text.
• Two-Factor Authentication (2FA): giga138 provides an additional layer of security through 2FA, which users can activate via an authenticator app or SMS.
• Real-Time Threat Monitoring: Our system continuously monitors login activity and account behaviour. Any suspicious activity will trigger an automatic security alert.
• Environment Separation: Production and development servers are fully separated. Real user data is never used in testing or development environments.
• Periodic Security Audits: The giga138 platform undergoes regular penetration testing and security audits by independent third-party firms to identify and address any vulnerabilities.

Giga138 understands that data sharing is a sensitive issue for users. We only share your personal information under very limited and controlled circumstances:

• Payment Processors: Information required to process financial transactions is shared with legitimate, registered payment processors such as local banks and digital wallet providers (FPX, TNG, GrabPay). They are bound by strict data confidentiality agreements.
• Technical Service Providers: Some technical functions of our platform are supported by third-party service providers such as server hosts and CDN providers. They receive only the minimum data necessary and are not permitted to use it for any other purpose.
• Governing Authority: giga138 will disclose user information to government authorities or law enforcement if required by a valid court order, search warrant, or legal reporting obligations related to AML/CTF.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, user information may be transferred as part of that transaction. Users will be notified in advance via an in-platform notification.

In all of the above situations, giga138 ensures that data recipients comply with data protection standards equivalent to or higher than our own. We do not permit data sharing for third-party advertising purposes.

Giga138 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: To collect information on how users interact with the platform (e.g., most frequently visited pages, load times). This data is used in aggregate to improve platform performance.
• Functional Cookies: To remember user preferences and settings such as preferred display resolution, display mode, and last game selection for a more personalized experience.
• Analytics Cookies: To help us understand overall platform usage patterns. All analytics data is processed anonymously and cannot be linked to individual users.

You can manage cookies through your browser settings at any time. However, disabling essential cookies may affect your login functionality and account security. Note: giga138 does not use third-party cookies for targeted advertising.

As a responsible platform, giga138 enforces a rigorous Know Your Customer (KYC) process in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) legal requirements.

Documents that may be requested during the KYC process:

• Malaysian Identity Card (MyKad) — front and back
• Recent bank statement (not exceeding 3 months) as proof of bank account ownership
• Selfie with identification document for further identity verification in specific cases
• Utility bill or recent address document if required for address verification

All KYC documents are submitted through encrypted channels and stored in a secure, access-restricted server environment. KYC documents are only accessed by authorised personnel and are not disclosed to third parties unless required by law.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and giga138's privacy policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the giga138 support team via live chat or email. We will process your request within 30 calendar days from the date of receipt.

Giga138 retains your personal data only for as long as necessary for the purposes stated in this privacy policy or as required by applicable law:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for AML compliance and tax obligation purposes.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian financial and tax regulations.
• KYC Documents: Retained for the duration the account is active and for 5 years after account closure or resolution of any related disputes.
• Communication Logs: Support tickets and live chat logs are retained for 2 years for quality control and dispute resolution purposes.
• Technical Log Data: Server logs and IP data are retained for a maximum of 90 days unless required for ongoing security investigations.

Once the retention period expires, your personal data will be securely deleted or converted into an anonymised format that cannot be linked to your identity.

Giga138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or improvements to the security technology we use.

• All material amendments will be communicated to users via in-platform notifications at least 14 days prior amendment takes effect.
• The "Updated" date at the top of this page will always reflect the latest version of the privacy policy.
• Continued use of the giga138 platform after the effective date of any amendment constitutes acceptance of the revised terms.
• Users who disagree with the amendments have the right to close their account and request data deletion in accordance with the established procedure.

We encourage users to review this page periodically. A version history of the Privacy Policy is available upon request through our support team.

If you have any questions, concerns, or wish to exercise your privacy rights, the giga138 team is ready to assist through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the giga138 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — please specify your email subject as "Data Privacy Enquiry" for faster handling.
• FAQ: Browse FAQ page us for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within the stipulated timeframe 3 working days. For formal requests regarding data access or deletion, please provide your account number and a clear description of your request to help us process it faster.