OFFICIAL PRIVACY POLICY OF box138

Box138 Privacy Policy — Transparent & Secure Malaysian User Data Protection

At box138, your privacy is not just a legal obligation — it is a responsibility we take seriously every day. Find out exactly how your personal data is collected, used and protected.

SSL 256
Encryption Bits
24/7
Security Monitoring
0
Sale of Data to Third Parties
Updated: January 2026
Encrypted Data
SSL 256-bit at all times
No Data Sales
Your data is not sold
Full User Rights
Access, edit, delete
Fully Transparent
No hidden terms

Full Privacy Policy of box138

This document explains exactly how box138 collects, processes, stores and protects your personal information. We believe every user has the right to know what happens with their data — without confusing language.

1 Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by box138 and applies to all users who access or use the box138 platform via box138.fun or our mobile app. It describes how we handle your personal information in line with industry best practices and applicable legal compliance requirements.

By using the box138 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us for further action regarding your account.

  • This policy covers all box138 services including live casino, sports betting, slots, bingo and all other games on the platform.
  • This policy is to be read alongside our Terms and Conditions and Responsible Gaming Policy.
  • We may update this policy from time to time — the latest revision date will always be displayed at the top of this page.

box138 is committed to never selling, renting, or disclosing your personal data to any third party for marketing purposes without your explicit consent.

2 Types of Personal Data We Collect

Box138 only collects data that is strictly necessary to provide a safe, fair, and compliant service. Below are the categories of data we collect and the purposes for which they are collected:

Data Category Sample Information Primary Purpose
Identity Information Full name, date of birth, IC/passport number KYC verification, fraud prevention
Contact Information Email address, phone number, address Account communications, customer support
Financial Data Bank account details, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, web browser Account security, fraud detection
Usage Data Game history, preferences, session duration Service improvement, responsible gaming
Communication Data Support chat logs, emails with us Service records, complaint resolution

We do not collect unnecessary information. Every piece of data collected has a clear and legitimate purpose. You can enquire about the specific data we hold via our Live Chat.

3 How Your Data Is Used

The personal data we collect is used responsibly for designated purposes only. box138 does not use your data for any other purpose without informing you in advance. Below are the primary uses of your data on our platform:

  • Account management: Creating, verifying, and securely maintaining your box138 account. This includes the login process, two-factor authentication, and account recovery.
  • Transaction processing: Processing deposits and fund withdrawals quickly and securely through our integrated payment channels, including DuitNow, FPX, and digital wallets.
  • Security & fraud prevention: Detecting and preventing suspicious activity, identity fraud, player collusion, and money laundering (AML).
  • Legal compliance: Meeting KYC, AML, and other compliance requirements applicable to online entertainment platform operators.
  • Customer support: Resolving enquiries, complaints, and technical issues more effectively when our staff have the necessary context.
  • Platform improvement: Understanding usage patterns to improve the user experience, introduce new features, and ensure the platform runs smoothly.
  • Responsible gaming: Monitoring gameplay patterns to identify users who may need assistance or gaming limits for their own safety.
  • Marketing communications: Sending relevant promotional information and offers — but only to users who have given consent to receive such communications.

4 Data Storage & Security Measures

The security of your data is our absolute top priority. box138 implements multiple layers of technical and organisational protection to ensure your personal data remains safe from unauthorised access, loss, or misuse at all times.

  • 256-bit SSL encryption: All data transmitted between your device and box138 servers is encrypted using the latest TLS/SSL protocols. No one can intercept your information in transit.
  • Secure servers: Data is stored in certified data centers that undergo regular security audits. Physical and digital access to servers is strictly limited to authorized personnel only.
  • Tiered access control: box138 internal staff only have access to data required for their specific roles. All access to sensitive data is logged and reviewed on a regular basis.
  • 24/7 Monitoring: An automated monitoring system operates around the clock to detect any suspicious activity or intrusion attempts and respond immediately.
  • Retention period: Active account data is retained for the duration of your membership. Transaction data is kept for a minimum of 5 years in accordance with legal compliance requirements. Data that is no longer needed will be securely deleted.

While we take all reasonable steps to protect your data, no security system is 100% guaranteed. Please also take your own precautions, such as using a strong password and not sharing your login credentials.

5 Data Sharing with Third Parties

Box138 does not sell your personal data to any third party. However, there are limited situations where we need to share data with certain parties to keep the platform functioning properly and to comply with the law. Such sharing is always governed by strict confidentiality agreements.

  • Payment providers: To process deposits and withdrawals, the required transaction information is shared with authorised payment providers such as DuitNow and FPX. These providers are subject to their own security standards.
  • Technology service providers: Companies that help us operate the platform — such as cloud computing services, analytics, and customer support — may have limited access to data required solely for their function.
  • Authorities and regulatory bodies: We may be required to disclose certain information to legal authorities, regulatory bodies, or law enforcement agencies if mandated by law or court order.
  • KYC verification service providers: To process identity verification, identification document details are shared with recognised KYC service providers for verification purposes only.

All third parties we work with are required to meet data protection standards equal to or higher than our own. We do not permit them to use your data for any other purpose.

6 Cookies, Pixels & Tracking Technologies

Like most online platforms, box138 uses cookies and similar technologies to enhance the user experience, maintain login session security, and understand how our platform is used. Below is an explanation of the types of cookies we use:

  • Essential cookies (required): These cookies are required for the platform to function properly. This includes login session cookies, security cookies, and cookies that enable you to navigate the platform. Without these cookies, the platform cannot operate.
  • Performance & analytics cookies: We use these cookies to understand how users interact with the platform — which pages are visited most often, how long sessions last, and where users encounter issues. This information is used in aggregate form without identifying individuals.
  • Preference cookies: These cookies store your preferences such as language, time zone, and display settings to ensure a more comfortable experience each time you log in.
  • Security cookies: Used to detect suspicious login activity, verify user identity and protect accounts from unauthorized access.

You can manage or disable most cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. Refer to your browser documentation for cookie management guidance.

7 User Rights Over Personal Data

You have full rights over your personal data held by box138. We respect and facilitate the exercise of all these rights. Below are your key rights as a box138 user:

Right to Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request immediate correction.

Right to Erasure

You may request the deletion of your personal data, subject to legal requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer.

Right to Restrict Processing

In certain situations, you may request that we restrict how your data is processed.

To exercise any of the above rights, please contact our support team via 24/7 Live Chat. We will process your request within 30 business days. Some requests may require identity verification beforehand.

8 KYC, Identity Verification & AML

As a responsible online entertainment platform, box138 complies with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements. These processes are industry standard and are designed to protect all users and ensure the platform is used lawfully.

  • Basic identity verification is required before your first withdrawal is processed or when certain transaction limits are reached.
  • Documents that may be requested include a Malaysian identity card (MyKad), passport, driver's license or recent bank statement.
  • All documents submitted for KYC purposes are encrypted during transmission and stored securely. They will not be used for any purpose other than identity verification.
  • KYC information is shared with accredited verification service providers who are bound by strict confidentiality agreements.
  • Box138 complies with AML reporting requirements and reserves the right to report suspicious transactions to the relevant authorities in accordance with its legal obligations.

KYC verification is typically completed within 24 to 48 business hours. You will be notified by email or in-account notification once verification is complete.

9 Child Privacy

The box138 platform is intended for users aged 18 and above only. We do not knowingly collect or process personal data from minors. This is our firm commitment to protecting children and young people.

  • If we find that personal data of a minor has been collected unintentionally, we will delete that data immediately and close the relevant account.
  • Parents or guardians who suspect their child has registered an account on our platform should contact our support team via Live Chat immediately.
  • Box138 performs age verification during registration and KYC to prevent access by minors.

10 Privacy Policy Amendments

Box138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to informing users of any material changes.

  • Significant changes will be communicated via in-platform notifications or email to the address registered with your account.
  • The "Updated" date at the top of this page will always reflect the date of the most recent revision.
  • Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy.
  • If you disagree with the amendments, you have the right to close your account and request data deletion in accordance with the rights set out in Section 7.

11 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help. We take every privacy inquiry seriously and strive to provide a thorough and satisfactory response.

  • Live Chat: The fastest way to reach us — available 24/7 in Malay and English.
  • Email: Send your detailed inquiry to [email protected] — we respond within 1 to 2 business days.

For requests relating to user rights (data access, correction, or deletion), please include your account information and the type of request clearly so we can process it more efficiently.

We are committed to responding to all privacy-related inquiries within 5 business days. Formal user rights requests will be processed within 30 business days as stipulated.

Why Your Data Is Safe with box138

Six core pillars that ensure your privacy and data security are maintained at all times on our platform.

256-Bit SSL Encryption

Every bit of data moving between your device and our servers is protected with bank-grade encryption. Your information cannot be intercepted by anyone.

Certified Secure Servers

Your data is stored in certified data centers that undergo independent security audits on a regular basis. Physical access to servers is monitored 24/7.

No Data Sales

Box138 has never and will never sell user personal data to advertisers or data brokers. Your data belongs to you, not to us as a business asset.

Strict Internal Access Control

Our staff can only access data necessary for their assigned duties. All access to sensitive data is logged, monitored, and periodically reviewed by the security team.

User Rights Respected

You may access, edit, download or request deletion of your data at any time. We process all requests within the stipulated timeframe without unnecessary delay.

Instant Security Notifications

In the event of any security incident affecting your data, we are committed to notifying you promptly and taking the necessary remedial action.

Your Privacy is Protected — Join box138 Today

Box138 is built to be not only entertaining but also safe and transparent. Register your free account now and enjoy an online entertainment experience trusted by hundreds of thousands of users in Malaysia.

Bahasa Melayu