UPDATED: JANUARY 2026

Privacy Policy Master38 – We Protect Your Data the Way You'd Protect Your Own Money

At master38, privacy is more than a formality. Every piece of information you share with us is protected using the latest encryption technology and rigorous security procedures. Read this Privacy Policy to understand your rights as a user in Malaysia.

Data Encryption
256-bit SSL
Data Sharing
None Without Consent
Effective Date
1 January 2026
Jurisdiction
Malaysia

Master38's Six Privacy Commitments to You

This is the foundation of how master38 manages your personal data — transparent, secure, and in line with international standards.

Bank-Grade Encryption

All data transmitted between your device and master38's servers is encrypted using TLS 1.3 with 256-bit SSL keys — the same level of security used by Malaysia's major banks such as Maybank and CIMB.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Master38 respects your rights as the data owner and will process all requests within 14 working days.

No Sale of Data to Third Parties

Master38 has never and will never sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you — not to us.

Secure Data Storage

Your data is stored in protected data centres with strict physical and digital access controls. master38 servers undergo regular independent security audits to ensure there are no exploitable vulnerabilities.

Marketing Opt-Out

You can opt out of promotional emails, SMS notifications, or any marketing communications at any time by updating your account settings or contacting the master38 support team via live chat.

Malaysia PDPA Compliance

The master38 privacy policy is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and ensure that every data handling process meets the requirements of local law.

This Privacy Policy effective from 1 January 2026. By using the master38 platform, you agree to how we handle your personal data as set out in this document. Enquiries may be sent to privacy@master38.my.

01 Introduction & Scope of Privacy Policy

Welcome to the master38 Privacy Policy. This document clearly and transparently explains how the master38 platform ("we") collects, uses, stores, protects, and in certain circumstances shares your personal information ("data") when you use the master38.my website and all related services.

We understand that your trust is the most valuable asset we hold. That is why we are committed to managing your personal data responsibly, transparently, and in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This Privacy Policy applies to all users of the master38 platform in Malaysia, including website visitors, registered members, and any individual who interacts with our services via the website, mobile app, or customer support channels.

Important: If you disagree with any part of this privacy policy, please discontinue your use of the master38 platform. Continued use after the effective date will be considered full acceptance of this policy.

02 Personal Data We Collect

Master38 only collects data that is strictly necessary for legitimate purposes. Below are the categories of data we collect and the reasons for doing so:

Data Category Example Information How It Is Collected
Identity Data Full name, date of birth, MyKad number Registration form, KYC process
Contact Data Email address, phone number Registration, profile updates
Financial Data Bank account number, account holder name Deposit and withdrawal processing
Technical Data IP address, device type, web browser Automatically during use
Activity Data Betting history, games played Platform system records
Communications Data Live chat conversation logs, support emails Interactions with the support team

2.1 Data We Do Not Collect

Master38 does not collect sensitive information such as biometric data, medical records, or religious information unless it is specifically required to comply with applicable legal or regulatory obligations.

2.2 Data from Third-Party Sources

In certain situations, we may receive data about you from trusted third parties such as identity verification service providers, fraud prevention agencies, and payment service providers operating in Malaysia, including DuitNow, Touch 'n Go eWallet, and FPX.

03 How We Use Your Data

Every use of your personal data by master38 has a valid legal basis and a clearly defined purpose. We use your data for the following:

  • Account Management: Creating and managing your member account, processing registrations, and verifying identity through the KYC process.
  • Transaction Processing: Processing deposits and withdrawals via legitimate Malaysian payment methods such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX/Maybank2u/CIMB Clicks.
  • Service Delivery: Allows you to access and enjoy all games on the master38 platform, including slots, Live Casino, virtual sports, and live matches.
  • Customer Support: Providing technical support and responsive customer service via live chat, email, and other communication channels.
  • Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and any unlawful activity that could harm the platform or other users.
  • Legal Compliance: Fulfilling legal and regulatory obligations applicable in Malaysia, including reporting requirements to the relevant authorities.
  • Service Improvement: Analysing usage patterns to improve the user experience, develop new features, and optimise platform performance.
  • Marketing Communications: Sending information about promotions, bonuses, and exclusive offers to members who have given consent to receive such communications.

Master38 will not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

04 Data Sharing & Disclosure

Master38 takes a very careful approach when it comes to sharing your personal data. We do not sell, rent, or trade your data to any outside parties. That said, there are limited situations where sharing your data is necessary:

4.1 Trusted Service Providers

We work with selected third-party service providers to operate the platform, including cloud infrastructure providers, payment service providers (DuitNow, FPX, Touch 'n Go), and gaming software providers. All such providers are bound by strict data protection agreements and may only use your data for the specified purposes.

4.2 Legal Requirements

Master38 may be required to disclose your data to Malaysian government authorities, law enforcement bodies, or courts where there is a valid court order, criminal investigation, or regulatory requirement mandating such disclosure.

4.3 Platform Protection

In cases of fraud, money laundering, or serious security threats, master38 reserves the right to share relevant information with financial crime prevention agencies or recognised cybersecurity service providers in Malaysia.

Our Commitment: Master38 will never sell or share your personal data with third parties for marketing purposes without first obtaining your explicit consent.

05 Data Security & Protection Measures

Master38 continuously invests in security infrastructure to protect your personal data from unauthorised access, breaches, alteration, or destruction. The security measures we have in place include:

  • End-to-End Encryption: All sensitive data is encrypted in transit using TLS 1.3 and stored in an encrypted state on our servers.
  • Strict Access Controls: Only authorised personnel with a strict "need-to-know" basis may access member personal data, and all access is logged and monitored.
  • Two-Factor Authentication: Internal access to systems containing sensitive data requires multi-factor authentication (MFA) for all staff.
  • 24/7 Monitoring: A cyber threat monitoring system operates around the clock to detect and respond to any suspicious activity in real time.
  • Regular Security Audits: Independent security assessments are conducted regularly by certified third-party auditors to identify and address system vulnerabilities.
  • Incident Response Plan: Master38 has a comprehensive incident response procedure in place to ensure any data breach is handled promptly and accurately.

In the event of a security incident involving your personal data, master38 will notify you within 72 hours of becoming aware of the incident, in line with international best practices in data protection.

06 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and master38's privacy policy, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Update or correct any personal data that is inaccurate or out of date.

Right to Erasure

Request deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Request your data in a structured format that can be transferred to another platform.

Right to Restriction

Request that we restrict the processing of your data under certain circumstances permitted by law.

To exercise any of the above rights, please contact us by email at privacy@master38.my. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days with prior notification to you.

07 Cookie Policy

Master38 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the master38 platform.

08 Data Retention Period

Master38 retains your personal data for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by applicable Malaysian law. The following are our data retention guidelines:

  • Active Account Data: For the entire duration your account remains active on the master38 platform, plus any additional period required by law following account closure.
  • Financial Transaction Records: A minimum of seven (7) years, in line with Malaysia's tax and financial regulatory requirements.
  • Support Communication Logs: Two (2) years from the date of last interaction, for reference and dispute resolution purposes.
  • Technical Data and Access Logs: One (1) year for security and fraud detection purposes.
  • KYC Records: Five (5) years following account closure, in line with anti-money laundering (AML) requirements.

Once the designated retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

09 Changes to the Privacy Policy

Master38 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or improvements in how we protect your data. Any changes will be published on this page along with a new effective date.

For material changes, we will endeavour to provide members with adequate notice via in-platform notifications or registered email. Continued use of the master38 platform following any amendments will be deemed your acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy page periodically — at least once every three months — to stay informed about how we manage your personal data.

10 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how master38 handles your personal data, we encourage you to reach out to us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

  • Privacy Email: privacy@master38.my – for enquiries specifically related to privacy and data rights
  • General Support Email: support@master38.my – for general enquiries about your account and services
  • Live Chat: Available 24 hours a day, 7 days a week via the live chat icon on the platform

For complaints relating to personal data handling that cannot be resolved internally, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the statutory authority under the Ministry of Communications and Digital Malaysia.

Response Time: We are committed to providing an initial response to all privacy enquiries within 2 working days and resolve cases within 14 business days from the date the enquiry is received.

Your Data Is Safe. Your Game Is Fun.

Sign up for a master38 account today and enjoy hundreds of slots, Live Casino, and virtual sports games with full confidence that your privacy is protected. Deposit from as little as RM10 via Touch 'n Go or DuitNow.

For users aged 18 and above only. Please play responsibly.

Bahasa Melayu