Privacy Policy · Updated 2026 · Malaysia PDPA Compliance

Paus138 Privacy Policy –
Your Data is Fully Protected

Paus138 is committed to protecting the privacy and personal data of every Malaysian member. This document clearly sets out what data we collect, why we need it and how we protect it – without confusing legal jargon.

Paus138's Commitment to Your Privacy

Six core principles that shape how Paus138 handles every member's personal data.

No Data Sold to Third Parties
Your personal information — your name, phone number, email address, transaction records — is never sold, rented, or shared with any third party for marketing purposes. Your data belongs to you, not to us as a business commodity.
No Data Selling No Sharing Privacy Guaranteed
Minimum Data – Only What's Necessary
Paus138 only collects data that is strictly necessary to operate your account, process payments and meet legal requirements. We do not collect irrelevant or unnecessary information purely for profiling purposes.
Data Minimisation Defined Purpose Transparency
Full Control in Your Hands
As a paus138 member, you have the right to access the data we hold, request corrections to inaccurate information, withdraw marketing consent, and in certain circumstances, request the complete deletion of your data.
Right of Access Right to Rectification Right to Erasure
Responsible Data Retention
Personal data is retained only for as long as necessary for the stated purpose, or as required by Malaysian law. Once the retention period expires, data is securely deleted from our systems.
Defined Retention Period Secure Deletion Responsible
Last updated: 1 January 2026 · Version 3.1
1

Introduction – Why This Policy Matters

This Privacy Policy ("Policy") describes how paus138 ("we", "Platform") collects, uses, stores, protects and shares the personal information of members who use the paus138.asia website and all related services.

Paus138 takes privacy seriously — not simply because it is required under Malaysia's Personal Data Protection Act 2010 (PDPA), but because we believe member trust is the foundation of everything we build. Without your trust, there is no platform. That is why we invest in best-in-class security infrastructure and a privacy policy that is transparent and accountable.

By registering a Paus138 account, using any of our services or simply browsing our website, you agree to the collection and use of personal information as described in this Policy. If you do not agree, please refrain from using our platform.

Important Note: This Privacy Policy is written in Bahasa Melayu and constitutes the legally binding version for all Malaysian members. It should be read together with Terms & Conditions Paus138, which serves as a supplementary document to this Policy.

2

Personal Data We Collect

Paus138 collects personal data from various sources as you use our platform. Below are the categories of data we collect and the reasons for doing so:

Data Categories Sample Information Source of Collection
Identification Data Full name, MyKad number, date of birth, gender Registration form & KYC process
Contact Data Phone number, email address, residential address Registration form & profile updates
Financial Data Bank account details, eWallet account numbers, deposit & withdrawal transaction records Payment processing & financial verification
Platform Activity Data Betting records, games played, session duration, in-platform transaction history Automatic platform usage
Technical Data IP address, device type, web browser, operating system, screen resolution Server logs & analytics systems
Communication Data Records of interactions with the support team, emails, complaints and feedback Customer support interactions

Sensitive Data: Paus138 does not collect sensitive data such as medical information, political views, religious beliefs or sexual orientation unless you voluntarily share such information in your communications with us and it is relevant to your request.

3

How We Use Your Personal Data

The personal data we collect is used solely for the following purposes. Paus138 does not use your data for anything outside this list without obtaining fresh consent from you beforehand:

  • Account management: Creating and maintaining your Paus138 account, verifying your identity at login and processing any account-related requests.
  • Payment processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), as well as handling withdrawals of winnings to your Malaysian bank account.
  • KYC and AML Compliance: Verifying member identities to meet Know Your Customer (KYC) requirements and Anti-Money Laundering (AML) laws applicable in Malaysia.
  • Customer support services: Responding to enquiries, resolving complaints, handling disputes and providing technical support in Bahasa Malaysia.
  • Platform security: Detecting and preventing fraud, multi-account usage, bonus abuse, and other suspicious activity that could compromise the security of the platform and its members.
  • Service improvement: Analysing usage patterns in aggregate (not at an individual level) to understand how to improve the user experience, introduce new features, and resolve technical issues.
  • Service communications: Sending important account-related notifications such as deposit confirmations, withdrawal status updates, security alerts and changes to terms.
  • Marketing communications: Only if you have given explicit consent — sending promotional information, bonus offers and the latest Paus138 news. You may unsubscribe at any time.
  • Responsible gambling: Monitoring activity patterns to identify members who may need responsible gambling support and proactively reaching out to them where necessary.
4

Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), Paus138 processes personal data on one or more of the following legal bases:

  • Contract: Data processing required to fulfil our agreement with you — including managing your account, processing bets and handling payments.
  • Legal obligation: Processing required to comply with applicable Malaysian laws, including KYC and AML requirements and legally mandated reporting to the relevant authorities.
  • Legitimate interest: Processing for the purposes of platform security, fraud prevention and service improvement – where our legitimate interests do not override your privacy rights.
  • Consent: For marketing and promotional communications, we rely on the explicit consent you have provided. You may withdraw this consent at any time.

Your Rights Regarding Consent: Where paus138 relies on your consent as the basis for processing, you have the right to withdraw that consent at any time through your account settings or by contacting us at support@paus138.asia. Withdrawing consent does not affect the validity of any processing that took place prior to the withdrawal.

5

Sharing Data With Third Parties

Paus138 does not sell, rent, or trade members' personal data to any third party. However, there are limited situations where we need to share data with certain parties for platform operational purposes:

  • Payment service providers: Required transaction data is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via DuitNow and FPX) to process your deposits and withdrawals. These providers are subject to strict security regulations and are not permitted to use your data for any other purpose.
  • Casino game providers: Required session data is shared with Live Casino and game providers for match settlement and winnings verification purposes. All our providers are bound by strict data protection agreements.
  • Technical infrastructure providers: Cloud computing and data storage services we use to operate the platform. Data is stored in protected environments with strict access controls.
  • Legal authorities: Where required by a court order, directive from an authority, or applicable Malaysian law, we may be obligated to disclose certain data to law enforcement agencies or regulatory bodies.

All third parties that receive personal data from Paus138 members are bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the specific purposes outlined in their agreement with us.

6

Paus138 Data Security Measures

Paus138 makes serious investments in security infrastructure to ensure your personal data remains protected at all times. The key security measures we have implemented are as follows:

  • 256-bit SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using the latest TLS protocol with 256-bit key strength — the same standard used by leading financial institutions in Malaysia.
  • Encryption of data at rest: Sensitive personal data such as identification card numbers, bank account details and passwords are stored in encrypted form using the latest industry-standard encryption algorithms.
  • Layered access controls: Only paus138 staff who genuinely require access to specific data in order to carry out their assigned duties are granted that access. All access is logged and monitored on an ongoing basis.
  • Two-factor authentication (2FA): Paus138's internal systems require two-factor authentication for all staff access. Members can also enable 2FA on their accounts via the security settings.
  • 24/7 security monitoring: Our cybersecurity team monitors the platform infrastructure around the clock to detect any suspicious activity, intrusion attempts, or security anomalies.
  • Regular security audits: paus138 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
  • Secure data backups: Critical data is regularly backed up to a secure, separate location with full encryption to ensure service continuity and disaster recovery.

Data Breach Notice: In the event of a security breach that materially affects your personal data, Paus138 is committed to notifying you and the relevant authorities within the timeframe prescribed by applicable Malaysian law. We will clearly explain what occurred, what data was involved and the steps we have taken to address it.

7

Cookies & Tracking Technologies

Paus138 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

  • Essential Cookies (Required): Cookies required for core platform functions such as login, session management, and security. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, display format and platform settings so you don't have to reconfigure them each time you log in.
  • Analytics Cookies: Helping us understand how members use the platform — the most visited pages, time spent and navigation patterns. This data is used in aggregate form to improve the overall user experience.
  • Security Cookies: Helping detect and prevent fraudulent activity, automated bots and unauthorised login attempts.

You can manage cookie settings through your web browser. However, disabling essential cookies will affect the functionality of the paus138 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

8

Cross-Border Data Transfers

In operating the Paus138 platform, your personal data may be transferred to and stored on servers located outside Malaysia – for example, when we use cloud computing services or international game providers.

When international data transfers occur, paus138 ensures that adequate protections are in place to safeguard your data. These safeguards include:

  • Data processing agreements requiring recipients to uphold data protection standards equivalent to Malaysia's PDPA
  • Encryption of data in transit using appropriate protocols
  • Security assessment of all third parties receiving data prior to any transfer being permitted
  • Use of recognised transfer mechanisms such as standard contractual clauses where applicable

Paus138 prioritizes working with providers based in Malaysia or in jurisdictions with robust data protection laws, where such options are available.

9

Your Rights as a paus138 Member

As a paus138 member and an individual protected under Malaysia's PDPA, you have the following rights with respect to your personal data:

Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within a reasonable timeframe.
Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data — subject to any legal requirements that obligate us to retain it.
Right to Restriction
You may request that we restrict the processing of your data in certain situations, such as when there is a dispute regarding the accuracy of your data.
Right to Portability
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time — and we will stop immediately.

To exercise any of the rights above, please contact our privacy team at support@paus138.asia, stating the right you wish to exercise and the relevant details. We will respond within 14 business days. In some cases, we may need to verify your identity before processing your request.

10

Children's Privacy

Paus138 does not provide services to individuals under the age of 18 and does not knowingly collect personal data from minors. Our platform employs multiple measures to ensure that only eligible individuals — aged 18 and above — can register and use our services.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without parental or guardian consent, we will take immediate steps to delete that data from our systems and close the account in question.

To Parents & Guardians: If you believe your child under the age of 18 has registered an account on Paus138 without your knowledge, please contact us immediately at support@paus138.asia. We will investigate and close the account, and return any deposited funds within a reasonable timeframe.

11

Data Retention Period

Paus138 retains your personal data only for as long as is necessary for the original purpose of collection, or for as long as required under Malaysian law. The following are general guidelines on our retention periods:

  • Active account data: Retained for as long as your paus138 account is active, plus any additional period required to fulfil legal obligations following account closure.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysian tax and financial legislation requirements.
  • KYC and identity verification records: Retained for a minimum of 5 years after the end of the business relationship, in line with Malaysian AML legal requirements.
  • Customer support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
  • Technical log data: Retained for 12 months for security and operational monitoring purposes.
  • Marketing data: Retained until you withdraw your consent or request deletion, whichever comes first.

When data is no longer needed and there is no legal requirement to retain it, Paus138 will securely delete or anonymise that data so it can no longer be linked to you.

12

Amendments to This Privacy Policy

Paus138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational reasons.

When we make material amendments to this Policy, we will:

  • Updating the "Last updated" date at the top of this document
  • Notifying members via their registered email or in-platform notice on paus138 at least 14 days before the changes take effect, for any material amendments
  • Highlighting key changes in a prominent notice on the platform's main page

Continued use of the Paus138 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and may close your account by contacting us.

Our Recommendation: We encourage you to review this Privacy Policy periodically – at least once every six months – to stay informed about how we handle your personal data. This page always contains the most current and in-force version of the Privacy Policy.

13

Contact Us – Privacy Enquiries

If you have any questions, concerns or complaints about how Paus138 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us via:

  • Privacy Email: support@paus138.asia (please state "Privacy Enquiry" in the email subject line)
  • Response Time: We will respond to privacy enquiries within 14 business days
  • Language of Communication: Bahasa Melayu or English

Paus138 is committed to treating all privacy enquiries seriously and providing clear, satisfactory responses. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.

Related Documents

This Privacy Policy should be read together with Terms & Conditions and the Responsible Gaming us. For frequently asked questions, visit the Frequently Asked Questions us.

Paus138 & Member Trust – Beyond Mere Compliance

If you have ever had concerns about the security of your personal data when using online platforms in Malaysia, you are not alone. High-profile data breach incidents involving various platforms have made many Malaysian users more cautious — and rightly so. At paus138, we do not view these concerns as obstacles to doing business. We see them as a responsibility we need to prove ourselves worthy of.

When you deposit funds via Touch 'n Go eWallet or DuitNow to bet on Liga Super football or the Malaysia Open badminton at Paus138, you are doing more than making a financial transaction. You are entrusting us with your account information, your transaction records and, in many cases, your identity card number. That trust is not something we take lightly. Every MYR we invest in security infrastructure, every hour our privacy team spends ensuring PDPA compliance, every policy we write – all of it exists to prove that your trust is well placed.

From a technical standpoint, the 256-bit SSL encryption we use means that even if someone were to intercept communications between your device and Paus138's servers — which is extremely difficult in itself — the data would appear as a meaningless string of random characters without the decryption key that only we hold. This same standard is used by Maybank, CIMB and virtually every major financial institution in Malaysia. It is not merely a feature — it is a baseline requirement for any serious financial platform.

From a policy standpoint, compliance with Malaysia's PDPA means you have enforceable legal rights you can act on. If you want to know what data we hold about you, you can ask and we are obliged to tell you. If the data is inaccurate, you can request a correction. If you no longer wish to receive marketing communications from us, a single email is all it takes and we will stop immediately. These are not voluntary promises — they are your legal rights, and we respect them fully.

One thing we want to make absolutely clear: paus138 has never and will never sell members' personal data to any third party for marketing purposes. Your betting records, bank account details, phone number — all of this is personal information you have entrusted to us for the specific purpose of using the paus138 platform, not to be commercialised by advertisers or other companies. paus138's business model does not rely on selling data — it relies on the trust of members who return to our platform knowing their data is safe.

If you have a question not covered in this Privacy Policy, or would like a deeper understanding of any aspect of how we handle your data, our team is available in Bahasa Melayu at support@paus138.asia. Your privacy is not something you should have to compromise on – and with Paus138, you won't have to.

FAQ – Paus138 Privacy Policy

The most common questions members ask about privacy and data protection at Paus138.

No. Your betting records — whether for Super League football, badminton, Live Casino or any other activity on Paus138 — are confidential personal information. We do not share this information with any third party for marketing, advertising or any other purpose outside of platform operations. The only situation in which betting records may need to be disclosed is if ordered by a court or Malaysian law enforcement authority through a valid legal process.

You may exercise your right of access by emailing support@paus138.asia with the subject line "Personal Data Access Request". Please include your full name and paus138 account number (not your password) to facilitate the verification process. We will respond within 14 business days with details of the personal data we hold in our systems relating to your account. Note: for security purposes, we may need to carry out additional identity verification steps before disclosing your account information.

When you close your paus138 account, we will deactivate it and cease all marketing communications. However, we are still required to retain your financial transaction records for a minimum of 7 years and your KYC records for a minimum of 5 years after account closure, in accordance with Malaysian legal requirements on financial record-keeping and AML. Data not subject to statutory retention requirements will be deleted according to the schedule set out in this Privacy Policy. If you need further clarification, contact us at support@paus138.asia.

Yes. Your financial information is protected with 256-bit SSL encryption during transmission and stored in encrypted form within our systems. Paus138 does not retain your full debit or credit card number – we only keep the minimum information necessary to process transactions. For deposits made via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, payments are processed directly through each provider's own payment gateway, which operates under its own security framework – Paus138 does not receive or store your eWallet or online banking login credentials.

Secure Payment Methods at Paus138

All Malaysian local payment methods with multi-layered security protection – your transactions are always kept safe.

Touch 'n Go eWallet
GrabPay
DuitNow
FPX – Maybank2u
FPX – CIMB Clicks
Boost eWallet
ShopeePay

Minimum deposit RM 10 · All transactions in MYR · 256-bit SSL protected · PDPA compliant

Bet with Confidence – Your Data is Safe at Paus138!

256-bit SSL encryption, Malaysia PDPA compliance, no data sold to third parties. Register free today and enjoy Sports Betting on football, badminton, Live Casino and more with complete peace of mind.

Have Questions About Your Data Privacy at paus138?

Our team is available in Bahasa Melayu – 24 hours a day, 7 days a week. Contact us or register today to start enjoying a safe and trusted platform.

By registering, you agree to our Terms & Conditions and this Privacy Policy. Please gamble responsibly. Responsible Gaming.

Bahasa Melayu