Official Documents

Privacy Policy TIM138 – Our Commitment Protecting Data You

At tim138, player privacy is not merely an obligation — it is the foundation of the trust we build together. This document clearly explains how we collect, use, store, and protect your personal information every time you use our platform.

Updated: January 2026 Bahasa Malaysia Version 2.5
Our Data Protection Commitment
  • 256-bit SSL encryption on all transactions
  • Data is not sold to third parties
  • Two-factor authentication (2FA) available
  • Strict KYC procedure compliance
  • Continuous 24/7 security monitoring
  • Right to access and deletion of personal data
  • Data stored on certified secure servers
256-bit
SSL Encryption
24/7
Security Monitoring
0%
Sale of Data to Third Parties
500K+
Trusted Players
Multi-Layer Protection

Six Pillars Data Security TIM138

Our comprehensive approach ensures your privacy is protected from every angle

Advanced Encryption

All data transmitted between your device and TIM138 servers is protected by 256-bit SSL encryption — the same level of security used by leading banking institutions in Malaysia. Your information remains safe at every step of the journey.

KYC Identity Verification

Our robust KYC (Know Your Customer) procedures ensure that only verified account owners can access and manage their accounts. This protects you against any unauthorised access attempts and provides an essential additional layer of security.

Secure Data Storage

Your personal data is stored in certified data centres with strict physical and digital access controls. Our servers are equipped with automated backup and disaster recovery systems, ensuring your data is never lost even in the event of a technical disruption.

No Data Sales

TIM138 has never and will never sell, rent or share your personal data with third parties for marketing purposes without your explicit consent. Your information belongs entirely to you — we use it solely to improve your experience.

Two-Factor Authentication

Secure your account with an extra layer of protection through two-factor authentication (2FA). Every login attempt will be verified via an OTP code sent to your registered phone number or email, effectively preventing unauthorized access.

Data Control Rights

You have the full right to access, correct, download, or request deletion of your personal data at any time. Contact the tim138 support team and we will process your request within seven business days at no additional charge.

Important Note: This Privacy Policy covers all services offered on the tim138.pro website and the tim138 mobile app. By using our platform, you agree to the collection and use of information as described in this document. Please read carefully before proceeding.

Personal Information We Collect

TIM138 collects various types of personal information when you interact with our platform. This collection is carried out transparently and only for legitimate purposes to improve service quality and ensure platform security.

Information you provide directly:

  • Full name as stated in your identification document
  • Date of birth for age verification (players must be 18 years of age or older)
  • An active email address for communication and account verification
  • Mobile phone number for OTP and security notifications
  • Bank account or digital wallet details for payment processing
  • Identity document (MyKad) and proof of address for KYC verification

Automatically collected information:

  • Your device's IP address and general location information
  • Device type, operating system, and web browser version used
  • Game history, transactions and platform activity
  • Session data including login times, session duration, and in-platform actions
  • Technical information about how you use the TIM138 app

How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. TIM138 never uses your data for purposes unrelated to the services we offer.

Purpose of Use Types of Data Used Legal Basis
Player account management Name, email, phone number Contract fulfilment
Deposit & withdrawal processing Bank details, KYC Contract fulfilment
Fraud prevention IP, transaction history, session data Legitimate interests
Identity verification (KYC) MyKad, supporting documents Legal obligations
Service communications Email, phone number Contract fulfilment
Promotions & personal offers Game history, preferences Player Consent
Platform improvements Usage data, feedback Legitimate interests

You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team. Withdrawing marketing consent will not affect your core services at tim138.

Information Sharing and Disclosure

TIM138 takes data sharing responsibilities very seriously. We do not sell your personal data to any third party. However, there are limited situations where we may need to share your information with specific parties:

  • Trusted Service Providers: Companies that help us deliver our services, such as payment processors (DuitNow, FPX, TNG eWallet), KYC solution providers and cloud server service providers. All parties are bound by strict confidentiality agreements.
  • Legal Requirements: When required by law, court order, or a competent enforcement agency, tim138 will disclose the necessary information and only to the extent required.
  • Fraud Prevention: In cases requiring investigation of fraud, money laundering, or security threats, we may share information with regulatory bodies or enforcement partners.
  • Business Transfers: In the event of a merger, acquisition or sale of TIM138 assets, player data may be transferred to the new entity, provided that an equivalent or stricter privacy policy is maintained.
Our Guarantee: TIM138 never sells, rents or shares players' personal data with third-party advertisers, data brokers or marketing companies without your explicit consent. This is our unwavering commitment.

Our Data Security Measures

TIM138 continuously invests in the latest security infrastructure to ensure your personal data is always protected. Our security approach is multi-layered — multiple protection mechanisms work simultaneously to ensure there is no single point of failure.

  • End-to-End Encryption: All communications between your device and TIM138 servers are encrypted using TLS 1.3 with AES-256 encryption, ensuring your data remains unreadable even if intercepted in transit.
  • Real-Time Threat Monitoring: Our automated monitoring system operates 24 hours a day, 7 days a week to detect and respond to suspicious activity in real time.
  • Regular Security Testing: Independent security audits and penetration testing are conducted periodically by certified third-party cybersecurity firms.
  • Internal Access Controls: Access to player data among tim138 staff is restricted on a need-to-know basis with full audit logs maintained.
  • Automatic Data Backup: Data is automatically backed up to redundant locations every hour to ensure rapid recovery in the event of any incident.

While we take all reasonable precautions, no system can guarantee 100% absolute security. We encourage players to play their part in keeping their accounts safe by using strong passwords, enabling 2FA and never sharing their login credentials with anyone.

Cookies, Tracking Technologies, and Your Choices

TIM138 uses cookies and similar tracking technologies to enhance user experience, understand usage patterns and deliver relevant content to you. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Preference Cookies: Stores your preferences such as language, time zone, and display settings to provide a more personalised experience.
  • Analytics Cookies: Helps us understand how players use the platform, which pages are visited most frequently, and where there are opportunities for improvement. This data is collected in aggregate and cannot be used to identify individuals.
  • Functional Cookies: Enables advanced features such as live chat support, saving favourite games, and personalised game recommendations.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

Players' Rights Regarding Personal Data

TIM138 fully respects your rights over your personal data. As a TIM138 player, you have the following rights, which you may exercise at any time:

  • Right of Access: You have the right to obtain a copy of all personal data we hold about you.
  • Right to Rectification: If any of your information is inaccurate or outdated, you have the right to request immediate correction.
  • Right to Erasure: In certain circumstances, you may request the deletion of your personal data — subject to applicable legal record-keeping obligations.
  • Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations as defined by law.
  • Right to Data Portability: You have the right to receive your data in a structured, machine-readable format for transfer to another service.
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing any justification.
How to Submit a Request: To exercise any of the above rights, contact our data protection team via live chat or email at [email protected]. We will respond to and process your request within 7 business days.

Data Retention Period

TIM138 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Below are our data retention guidelines:

  • Active Account Data: Retained for the duration of your active account and for a period of 5 years after account closure for financial regulatory compliance purposes.
  • Transaction Records: Retained for a minimum of 7 years in accordance with applicable accounting and anti-money laundering legal requirements.
  • Security Logs: Retained for 12 months for the purposes of security incident investigation and fraud prevention.
  • KYC Documents: Retained for the duration of the active account and 5 years after account closure in line with anti-money laundering compliance requirements.
  • Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed, it will be securely deleted using industry-standard erasure methods or permanently anonymised so it can no longer be linked to your identity.

Changes to This Privacy Policy

TIM138 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. We are committed to informing you of any material changes through the following means:

  • In-platform notifications via clearly visible pop-ups or notification banners
  • Notification emails are sent to your registered email address
  • Update the "Last Updated" date at the top of this document

Minor changes that do not affect your fundamental rights may take effect immediately without prior notice. For more significant changes, we will provide at least 14 days' notice before they take effect, giving you sufficient time to review and make an informed decision.

We encourage you to review this Privacy Policy periodically. Continued use of the TIM138 platform after any changes take effect will be considered your acceptance of the updated policy.

Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how TIM138 handles your personal data, we are here to help. Our Data Protection Team can be reached via:

  • Support Email: [email protected] — response within 24 hours
  • Live Chat: Available 24/7 directly within the TIM138 platform for immediate enquiries
  • Help Centre: Visit the FAQ us for answers to frequently asked questions about privacy

We are committed to addressing every inquiry or complaint seriously and within a reasonable timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Guaranteed Response Time: The TIM138 support team operates 24 hours a day, 7 days a week. Live chat inquiries are answered within 5 minutes, while emails are replied to within 24 hours on business days.
🛡️

Your Data is Safe. Your Experience is Guaranteed at tim138!

Join over 500,000 Malaysian players who game with complete confidence. TIM138 protects your privacy at every step — register for free today and enjoy the fun without the risk.

Related Pages

Documents and Information Other Important

Bahasa Melayu