Sensa138 Privacy Policy — Data Protection Commitment for Malaysian Players

At sensa138, your privacy is not merely a legal obligation — it is a core value that guides every decision we make. This document clearly sets out how sensa138 collects, uses, stores, and protects your personal data as a member of our platform in Malaysia.

Effective Date: 1 January 2026  |  Version: 5.0  |  Applicable to all sensa138 members in Malaysia

01Information We Collect

Sensa138 collects various types of personal information when you register an account, use the platform, or contact our support team. This data collection is necessary to enable sensa138 to deliver services that are secure, personalised, and compliant with applicable legal requirements.

1.1 Information You Provide Directly

When you register a sensa138 account or update your profile, we collect the following information:

  • Identity information: full name as per MyKad or passport, date of birth, gender, and identification number
  • Contact information: email address, active Malaysian phone number, and residential address
  • Account information: username, password (stored in encrypted form), language and currency preferences
  • KYC verification documents: copies of MyKad, passport, utility bills, or bank statements submitted for the identity verification process
  • Financial information: bank account number, phone number linked to an e-wallet (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay) for deposit and withdrawal purposes

1.2 Automatically Collected Information

When you use the sensa138 platform, our systems automatically record the following technical information and activity:

  • Device information: device type, operating system, mobile phone model, screen resolution, and unique device identifier
  • Network information: IP address, internet service provider (ISP), general geographic location (state/city), and connection timestamp
  • Platform activity data: records of all gaming sessions, bets placed, wins and losses, deposit and withdrawal history, and in-platform navigation activity
  • Cookie and session data: login session information, display preferences, and settings you have saved within the platform

sensa138 never collects credit or debit card numbers directly. All payments are processed through secure third-party payment gateways — we receive only transaction confirmations, not your card details.

02How We Use Your Data

Sensa138 uses collected personal data solely for legitimate purposes directly related to delivering the platform's services to you. We will not use your data for any other purpose without first obtaining your consent.

Purpose of Use Types of Data Used Legal Basis
Account management & identity verification Full name, email, MyKad number, date of birth Contract performance
Deposit & withdrawal processing Financial information, transaction records Contract performance
Fraud prevention & AML IP, device, transaction patterns, KYC Legal obligation
Customer support Account history, communication records Legitimate interest
Personalise your platform experience Game history, preferences Legitimate interest
Promotional & bonus communications Email, phone number Consent
Platform improvement & analytics Anonymised usage data Legitimate interest

All data usage described above is subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and the international data protection standards applicable to sensa138's operations.

03Sharing Data with Third Parties

Sensa138 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in the course of operating the platform, sensa138 may need to share certain data with trusted business partners under the following limited circumstances.

3.1 Trusted Service Providers

Sensa138 shares only the minimum necessary data with third-party service providers who support our platform operations, including:

  • Game provider: game session data is shared with game providers (such as slots and live casino providers) only to the extent necessary to deliver the relevant game to you
  • Payment gateway: transaction information is shared with payment processors to facilitate deposit and withdrawal processing via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX
  • Identity verification services: KYC documents are shared with licensed third-party identity verification service providers for verification purposes only
  • Cloud infrastructure provider: data is stored on secure cloud servers operating under strict confidentiality agreements with sensa138

3.2 Legally Mandated Disclosures

Sensa138 may disclose your personal data to the relevant authorities when required by Malaysian law or a valid court order, including for the purposes of criminal investigation, Anti-Money Laundering (AML) compliance, or illegal gambling monitoring. In such circumstances, sensa138 will only disclose the minimum data required within the scope of the relevant legal request.

All of sensa138's third-party partners are required to meet data protection standards equivalent to or higher than those upheld by sensa138 itself, and are prohibited from using your data for any purpose outside the scope of the services they provide to sensa138.

04Data Security & Storage

Sensa138 continually invests in the latest data security infrastructure to ensure the personal information of all members is protected to the highest practicable standard at all times.

4.1 Technical Security Measures

The technical security measures sensa138 has put in place to protect your data include:

  • 256-bit SSL encryption for all data transmitted between your device and sensa138's servers
  • At-rest encryption for all sensitive data stored on our servers
  • Two-factor authentication (2FA) available for all sensa138 member accounts
  • Intrusion detection system (IDS) and continuous 24-hour security monitoring
  • Regular penetration testing conducted by independent security experts
  • Strict role-based access control (RBAC) for sensa138 internal staff

4.2 Data Retention Period

Sensa138 retains your personal data for as long as your account remains active and for any period required by applicable legal or regulatory obligations. Following account closure, personal data will be retained for a minimum period of 5 years to comply with financial record-keeping and anti-money laundering requirements set by the relevant regulatory authorities.

4.3 Response to Data Breaches

In the event of a data breach involving the personal data of sensa138 members, we are committed to notifying affected members within 72 hours once a breach has been confirmed, in line with international data protection best practices. Notification will be provided via your registered email address and through an in-platform notice.

05Cookies & Tracking Technologies

Sensa138 uses cookies and similar tracking technologies to enhance the platform experience, understand usage patterns, and ensure the security of your login sessions.

5.1 Types of Cookies Used

  • Essential Cookies: required for core platform functions such as login session tracking, language selection, and form security. These cookies cannot be disabled as they are essential to the operation of the sensa138 platform.
  • Performance Cookies: collect information about how you use the platform — pages visited, time spent, and any errors encountered — to help us continuously improve platform performance.
  • Functional Cookies: stores your preferences such as display settings, favourite game selections, and configured limits so you do not have to reconfigure them each time you log in.
  • Analytics Cookies: used to understand overall platform usage patterns through anonymised data for sensa138's internal analytics purposes.

5.2 Managing Your Cookies

You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect the functionality of the sensa138 platform and prevent you from logging in or using certain features. sensa138 recommends keeping essential and functional cookies enabled for the best gaming experience.

Sensa138 does not use third-party cookies for advertising purposes that track your activity across other websites. All cookies used are solely to enhance your experience on the sensa138 platform.

06Financial & Payment Data

Sensa138 takes the protection of members' financial data very seriously. All information relating to deposits, withdrawals, and financial transactions is handled in accordance with the highest applicable financial security standards.

6.1 Malaysian Payment Methods

Sensa138 supports approved Malaysian payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (including Maybank2u, CIMB Clicks, RHB Now, and Hong Leong Connect). When you make a deposit or withdrawal using any of these methods, sensa138 only retains transaction confirmation details — not your eWallet or banking login credentials. All sensitive payment data is processed directly by licensed third-party payment gateways and never passes through or is stored on sensa138's servers.

6.2 AML Compliance

As part of sensa138's commitment to Anti-Money Laundering (AML) prevention, all financial transactions are monitored by our automated detection system. Transactions displaying unusual or suspicious patterns may be held for manual review. In such cases, we will contact you to request the necessary verification or supporting documents before the transaction can proceed.

6.3 Transaction Records

All of sensa138's financial transaction records — including deposits, withdrawals, bets, and winnings — are securely stored in our systems and accessible to you at any time through the transaction history section of your account. These records are retained for the period required by applicable financial regulations.

07Your Rights as a Data Subject

As a sensa138 member and data subject under Malaysian data protection law, you hold several important rights regarding the personal data we hold about you. Sensa138 is committed to respecting and facilitating the exercise of these rights.

7.1 Right of Access

You have the right to request a copy of all personal data sensa138 holds about you. Data access requests can be submitted by email to support@sensa138.top with the subject line "Data Access Request". Sensa138 will process your request within 30 days of receipt.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly from your account settings. For corrections to identity information such as your name or date of birth, please contact sensa138 support with the relevant supporting documents.

7.3 Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data from sensa138's systems — generally when that data is no longer needed for the purpose it was originally collected. However, this right is subject to legal record-keeping obligations that are binding on sensa138. Data that must be retained by law cannot be deleted upon individual request.

7.4 Right to Object to Processing

You have the right to object to the processing of your personal data for certain purposes, particularly for direct marketing. To withdraw your consent for marketing communications, you may click the "unsubscribe" link in any sensa138 marketing email, or update your communication preferences directly from your account settings.

To submit any request relating to your privacy rights, please contact the Sensa138 Data Protection Officer by email at support@sensa138.top. We will respond within 3 business days of receiving your request.

08Cross-Border Data Transfers

In the course of operating the sensa138 platform, your personal data may be transferred to and stored on servers located outside Malaysia for the purposes of service continuity, data backup, and technical processing. All such transfers are carried out with adequate safeguards to ensure your data remains protected even beyond Malaysian borders.

Sensa138 ensures that all cross-border data transfers comply with the requirements of Malaysia's Personal Data Protection Act 2010, including ensuring that the receiving country or entity provides an equivalent level of data protection. Comprehensive and binding data transfer agreements are in place for all data transfers to international third parties involved in sensa138's operations.

09Marketing Communications

Sensa138 may send you marketing communications regarding the latest promotions, new bonuses, game launches, and special offers related to your favourite game categories — including slots, Live Casino, Baccarat, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), and lottery.

9.1 Types of Marketing Communications

  • Promotional emails: information about bonuses, special offers, and new game launches at sensa138
  • Platform notification: in-app or on-site sensa138 notifications about offers personalised for you
  • Promotional SMS: brief messages about limited-time promotions sent to your registered phone number (with your consent)

9.2 Managing Your Communication Preferences

You have full control over the types of communications you wish to receive from sensa138. Your communication preferences can be updated at any time through the notification settings section of your account. You may also opt out of marketing emails by clicking the "Unsubscribe" link found at the bottom of any sensa138 marketing email. Opting out of marketing communications will not affect your receipt of important transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts.

10Policy Amendments & Contact Us

Sensa138 reserves the right to update or amend this privacy policy at any time to reflect changes in our data practices, new legal requirements, or improvements to the way we protect your data. The effective date shown at the top of this document will be updated each time an amendment is made.

10.1 Amendment Notifications

For material amendments that significantly affect your privacy rights, sensa138 will notify you via your registered email address and through a prominent in-platform notification at least 14 days before the amendments take effect. Continued use of the sensa138 platform after the effective date of any amendment will be considered acceptance of the updated privacy policy terms.

10.2 Contact Us

For any questions, concerns, or requests relating to this privacy policy or the handling of your personal data by sensa138, please contact us through the following channels:

  • Email: support@sensa138.top (subject: Privacy Inquiry)
  • Live Chat: available 24 hours a day, 7 days a week via the chat icon within the sensa138 platform

Sensa138's Bahasa Malaysia-proficient support team will respond to your enquiry within 3 business days. For cases involving a data breach or urgent security issues, please include "URGENT" in your email subject line for prioritised handling.

6 Ways Sensa138 Protects Your Personal Data

A good privacy policy must be backed by real action. These are the concrete steps sensa138 takes every day to keep your data safe.

End-to-End 256-bit SSL Encryption

All data transmitted between your device and the sensa138 platform is protected by 256-bit SSL encryption — the same military-grade security technology used by Malaysia's leading banks. None of your data travels unencrypted.

Restricted Employee Data Access

Only sensa138 employees with a legitimate business need are permitted to access member personal data — and every access is logged and monitored. No employee may access your account data without a clear audit trail.

Periodic Independent Security Audits

Sensa138's data security infrastructure is audited regularly by accredited, independent cybersecurity firms. Any vulnerabilities identified are remediated within a defined timeframe — we do not wait for an incident to occur before taking action.

No Payment Card Data Stored

Sensa138 does not store credit or debit card numbers directly. All payments are processed through licensed third-party secure gateways — we only receive transaction confirmations. Deposits made via Touch 'n Go, DuitNow, and GrabPay are processed without sensa138 retaining your eWallet login credentials.

Breach Notification Within 72 Hours

In the event of a security incident involving member data, sensa138 is committed to notifying all affected members within 72 hours — well ahead of most other platforms in the industry. Transparency is the foundation of our trust.

Full Control is in Your Hands

You can access, update, or request deletion of your personal data at any time. Marketing communication preferences can be managed directly from your account settings — no need to contact support — because we believe you have the right to control your own information.

Your Privacy Rights as a Sensa138 Member

Under Malaysian data protection law, you hold these rights and sensa138 is fully committed to honouring them.

Right of Access

Request a copy of all personal data sensa138 holds about you at any time. Processed within 30 days.

Right to Rectification

Easily correct any inaccurate or outdated data via your account settings or by contacting support.

Right to Erasure

Request deletion of your personal data when it is no longer needed, subject to legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes, or withdraw your consent at any time.

Frequently Asked Questions About Sensa138's Privacy Policy

No, sensa138 never sells, rents, or trades your personal data to any third party for their own marketing purposes. Your data is shared only with carefully selected and trusted service partners — such as game providers, payment gateways, and identity verification providers — and only to the extent necessary to deliver services to you. All such partners are bound by strict confidentiality agreements with sensa138.

sensa138 does not store your sensitive financial information directly. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, your payment details are processed directly by a licensed and verified third-party payment gateway. sensa138 receives only transaction confirmation details (amount, time, and status) — not your account number, e-wallet password, or banking information. All communication between the sensa138 platform and the payment gateway is protected with 256-bit SSL encryption.

Following account closure, sensa138 retains your personal data for a minimum period of 5 years to comply with the financial record-keeping and anti-money laundering (AML) requirements stipulated under Malaysian law and international regulatory bodies. Data retained after account closure is accessed only when necessary to fulfil legal obligations or to resolve outstanding disputes. Once the mandatory retention period expires, your data will be securely deleted from sensa138's systems.

There are two easy ways to stop receiving promotional emails from sensa138: (1) click the "Unsubscribe" link found at the bottom of any marketing email you receive from sensa138 — your request will be processed automatically within 24 hours; or (2) log in to your sensa138 account, go to Account Settings, and update your communication preferences under the Notifications section. Please note that opting out of promotional emails will not stop you from receiving important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts.

In the event of a merger, acquisition, or sale of sensa138 assets involving the transfer of members' personal data to another entity, sensa138 is committed to notifying all affected members via email and in-platform notification at least 30 days before any data transfer takes place. The new entity receiving the data will be required to adhere to an equivalent or stricter privacy policy, and you will be given the option to request deletion of your data before the transfer occurs if you do not agree to the new terms.

Play with Confidence — Your Data is Safe at Sensa138

Sensa138 protects your privacy to the highest security standards. Register for free today and enjoy a safe, fair, and enjoyable gaming experience alongside more than 500,000 Malaysian members.

For individuals aged 18 and above only. Terms & conditions apply. Please gamble responsibly.

Bahasa Melayu