At Gajah138, protecting your personal data is not an afterthought — it is a core responsibility. This Privacy Policy explains in plain, structured terms exactly what data we collect, why we collect it, how it is used, and the rights you hold as a Gajah138 player.
Six principles that define how Gajah138 handles your personal information. The full policy below provides the legal detail behind each commitment.
Gajah138 does not sell, rent, or trade your personal information to third-party marketing companies, data brokers, or advertisers. Your data is used exclusively to operate your account and fulfil our regulatory obligations.
All personal data is stored with 256-bit AES encryption at rest and transmitted exclusively over TLS/HTTPS connections. Access to player data is restricted to authorised personnel on a strict need-to-know basis.
You have the right to access, correct, port, and request deletion of your personal data at any time. Requests are processed within 30 days. Contact us at [email protected] to exercise your rights.
We collect only the personal data that is strictly necessary for the purposes described in this Policy. We do not retain data beyond the periods required for legal, regulatory, and operational purposes.
Gajah138 processes personal data in compliance with applicable international data protection frameworks and gaming regulatory requirements, including KYC and AML obligations that apply to licensed online gambling platforms.
Marketing communications are optional. You may withdraw consent for promotional emails, SMS, and in-platform notifications at any time through your account settings or by contacting our support team directly.
This Privacy Policy ("Policy") is issued by Gajah138 ("we", "us", "our") and applies to all personal data collected through the Gajah138 website at https://gajah138.cam, its sub-domains, and any related services, platforms, or communications (collectively, the "Platform").
Gajah138 is an online gaming and sports betting platform serving players across Malaysia, including users in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and beyond. As a platform handling financial transactions and identity-sensitive information, we recognise the importance of treating your personal data with the utmost care and transparency.
Your Agreement: By creating a Gajah138 account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with Gajah138.
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| Data Controller | Gajah138, which determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of Gajah138 pursuant to a data processing agreement. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| Consent | A freely given, specific, informed, and unambiguous indication of the data subject's wishes, by a statement or clear affirmative action, signifying agreement to the processing of personal data. |
| KYC | Know Your Customer — the regulatory identity verification process applied to player accounts before withdrawal privileges are activated. |
| Cookie | A small text file placed on your device by the Platform to facilitate session management, analytics, and personalisation. |
Gajah138 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
We collect personal data through the following channels and mechanisms:
Gajah138 processes your personal data only for the specific, legitimate purposes described in the table below. We do not use your data for any purpose incompatible with the original basis of collection:
| Purpose | Description |
|---|---|
| Account Management | Creating, operating, and maintaining your player account, including login authentication and session management. |
| Identity Verification (KYC) | Verifying your identity and age (21+) in compliance with applicable gaming regulatory requirements and anti-money laundering obligations. |
| Payment Processing | Facilitating MYR deposits and withdrawals via your chosen payment method, and maintaining transaction records for accounting and audit purposes. |
| Fraud Prevention & Security | Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and other prohibited conduct on the Platform. |
| Customer Support | Responding to your enquiries, resolving disputes, and processing complaints through our live chat and email support channels. |
| Responsible Gambling | Monitoring player activity to identify signs of problematic gambling behaviour and enforcing self-exclusion, deposit limits, and other responsible gambling tools where activated. |
| Legal Compliance | Meeting obligations under applicable gaming regulations, tax laws, and financial crime legislation, including record-keeping and reporting requirements. |
| Platform Improvement | Analysing anonymised usage patterns to improve platform performance, personalise content, and develop new features — with no individual identification. |
| Marketing (Optional) | Sending promotional communications about bonuses, new games, and platform updates to players who have opted in to receive such messages. |
Where international data protection frameworks apply, Gajah138 relies on the following legal bases for processing personal data:
Gajah138 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data in the limited circumstances described below, and only to the extent necessary for the purpose stated:
International Transfers: Some of our service providers may process personal data outside Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection standards.
Gajah138 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device when you visit the Platform.
You may configure your browser to block or delete cookies at any time. Please be aware that disabling essential cookies will impair the functionality of the Gajah138 Platform, including the ability to log in and process transactions. Analytics and preference cookies can be disabled without affecting core functionality.
Gajah138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory, or accounting obligations that require longer retention. The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Requests for early deletion are subject to our ability to comply without breaching legal retention obligations — see Section 11 for details of your erasure rights.
Gajah138 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
Your Responsibility: No security system is impenetrable. You are responsible for maintaining the confidentiality of your login credentials. Do not share your password with anyone. Gajah138 staff will never ask for your password. If you suspect your account has been compromised, contact us immediately at [email protected].
Subject to applicable data protection law, you hold the following rights in respect of your personal data processed by Gajah138. You may exercise these rights at any time by contacting us at [email protected]. We aim to respond to all valid requests within 30 calendar days.
Request a copy of the personal data Gajah138 holds about you, including a summary of how it is used.
Request correction of any inaccurate or incomplete personal data held about you without undue delay.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
Request restriction of processing in certain circumstances — for example, while the accuracy of your data is being verified.
To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Data Rights Request — [Your Name]". We may ask you to verify your identity before processing your request. Note that certain rights may be limited where they conflict with our legal obligations — for example, we cannot delete transaction records that we are legally required to retain.
The Gajah138 Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21.
Age verification is conducted as part of our standard account registration and KYC process. Where we identify or have reasonable grounds to believe that personal data has been submitted by a person under 21 years of age, we will immediately suspend the associated account, delete all collected data, and retain no records beyond those required to document the breach for compliance purposes.
If you believe a minor has registered on our Platform, please contact us immediately at [email protected] so that we may take appropriate action promptly.
The Gajah138 Platform does not contain links to third-party websites as a matter of policy. However, in the event that any third-party content or links are encountered, please note that Gajah138 has no control over the privacy practices or content of external websites. We are not responsible for the data collection, use, or privacy practices of any third-party site that you may access independently.
Payment provider interfaces (such as your bank's authentication page or a DuitNow confirmation screen) that you interact with during a transaction are governed by the privacy policies of the respective financial institution or e-wallet provider, not by this Policy.
Gajah138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. Material changes to this Policy will be communicated to registered players via the email address on file and/or by a prominent notice on the Platform homepage, at least seven (7) days before the changes take effect — except where immediate changes are required by law or for security reasons.
The date of the most recent update is displayed at the top of this Policy. Your continued use of the Gajah138 Platform following the effective date of any updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests relating to this Privacy Policy, the data we hold about you, or the exercise of your data rights, please contact us using the details below. All contact information is provided as plain text — please copy and use these details manually:
Data Privacy Enquiries: [email protected]
Subject Line: "Privacy Policy Enquiry — [Your Name]" for general questions, or "Data Rights Request — [Your Name]" for formal rights exercises.
Live Chat: Available 24/7 via the on-site chat widget. For privacy-related matters, request escalation to our Data Privacy team.
Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days of receipt.
Our support team handles player data enquiries from across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other regions. All communications are conducted in English.
Our support team is available 24/7 to answer questions about your data, account privacy settings, and how to exercise your rights. Or return to the homepage to explore everything Gajah138 has to offer.