Your privacy is not merely a legal obligation to Hero138 — it is a core value we uphold in every aspect of our platform's operations.
Hero138 employs a multi-layered approach to ensure your personal data remains protected at all times.
All data transmitted between your browser and Hero138's servers is encrypted using TLS 1.3 with AES 256-bit encryption — the same standard used by Malaysia's leading banking institutions.
Your personal and financial data is stored in encrypted databases with strict access controls. Only authorised personnel with a legitimate business need may access this information.
Hero138's Know Your Customer (KYC) process ensures that only verified individuals can access and manage accounts, protecting you from unauthorised use of your account by third parties.
Hero138's security monitoring system operates 24/7 to detect and block suspicious activity, unauthorised login attempts, or potential data breaches before they cause any impact.
Two-factor authentication is available for all Hero138 accounts. With 2FA enabled, logging in from a new device requires additional verification via SMS or email in addition to your password.
Hero138 has never sold, rented, or traded members' personal data to any third party for marketing or other commercial purposes, and will never do so without your explicit consent.
This Privacy Policy describes how Hero138 ("we", "the Platform", or "Hero138") collects, uses, discloses, and protects your personal information when you visit or use our website and services at hero138.biz.
As an online casino platform serving Malaysian players, Hero138 understands that trust is our most valuable asset. We do not view personal data management as a mere legal compliance obligation — rather, it is a genuine commitment to every member who has entrusted their information to us.
This Privacy Policy applies to all Hero138 platform users, including website visitors, registered members, and former members. By using the Hero138 platform, you agree to the data collection and usage practices described in this policy.
Hero138 only collects information that is strictly necessary to provide the services you request and to fulfil our legal obligations. The information we collect falls under the following categories:
| Data Category | Sample Information | Requirements |
|---|---|---|
| Personal Identification Information | Full name, MyKad/Passport number, date of birth, gender | Mandatory (KYC & age verification) |
| Contact Information | Email address, mobile number, residential address | Mandatory (account communications) |
| Financial Information | Bank account number, e-wallet account holder name (TNG, GrabPay, Boost, ShopeePay, DuitNow) | Mandatory (deposits & withdrawals) |
| Platform Activity Data | Betting records, game history, deposit/withdrawal transactions | Automatic (platform records) |
| Technical Data | IP address, browser type, operating system, cookie data | Automatic (security & performance) |
| Communication Data | Live chat records, support emails, complaint feedback | Where relevant |
Hero138 does not collect sensitive information such as biometric data, medical information, or religious/political beliefs, unless specifically required by law.
Hero138 collects your personal information through several different channels:
Hero138 uses the personal data collected solely for the following legitimate and stated purposes:
Hero138 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in certain limited circumstances, Hero138 may need to share your information with the following parties:
All third parties we work with are bound by strict data confidentiality agreements and must comply with data security standards equivalent to or higher than those of Hero138.
Hero138 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.
Hero138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.
You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect your experience on the Hero138 platform.
As a Hero138 member, you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data Hero138 holds about you. Requests will be processed within 14 business days.
If your data is inaccurate or incomplete, you have the right to request that Hero138 correct or complete that information.
You may request the deletion of your personal data, subject to Hero138's legal obligations to retain certain records.
You have the right to object to the processing of your data for specific purposes such as direct marketing. Objections will be honoured immediately.
You have the right to receive your personal data in a machine-readable format for transfer to another platform, where this is technically feasible.
In certain circumstances, you may request that processing of your data be restricted while its accuracy is under review or a dispute is being resolved.
Hero138 retains your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by applicable law.
Once the retention period has lapsed and there is no further legal obligation to retain the data, Hero138 will securely delete or destroy your personal data using methods that ensure it cannot be recovered.
The Hero138 platform is not designed for, nor intended to be accessed by, individuals under the age of 18. Hero138 does not knowingly collect personal data from minors.
Should Hero138 discover that personal data has been collected from an individual under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the account in question.
If you believe that someone under the age of 18 has registered a Hero138 account, please contact our support team immediately at support@hero138.biz.
Hero138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. When significant changes are made, we will notify you via a prominent notice on the platform or through your registered email.
Continued use of the Hero138 platform after the effective date of any amendments constitutes acceptance of the updated Privacy Policy.
For any questions, concerns, or requests relating to your privacy and data protection at Hero138, please contact us:
Every deposit and withdrawal via the following payment methods is protected by Hero138's additional encryption layer.
Now that you know how Hero138 protects your privacy, join over 250,000 Malaysian players who play safely and confidently on our platform.
For users aged 18 and above. Terms and Conditions apply.