Elang138 Privacy Policy – Member Personal Data Protection

Elang138 collects your personal data only when necessary to provide you with a quality and secure service. We do not collect excessive or irrelevant information beyond what is required for the operation of our platform.

Information you provide directly:

• Full name as shown on your official identification card.
• Date of birth and identification card number for age and identity verification purposes (KYC).
• Active email address and mobile phone number for account communications.
• Current residential address for legal compliance purposes.
• Bank account or digital wallet details you registered for deposits and withdrawals.
• Supporting documents such as copies of identification cards and bank statements when KYC verification is required.

Information collected automatically:

• IP address and general location information (state/country) for geographic region verification.
• Device type, operating system and web browser you use to access the platform.
• Gaming activity data including date, time, game type and wagering value.
• Financial transaction history within the platform for audit and security purposes.
• Access logs and session data to help detect any suspicious activity on your account.

Elang138 uses collected personal data solely for legitimate and transparent purposes. We do not process your data for any purpose not stated in this policy without obtaining your prior consent.

Elang138 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances in which we need to share your information with other parties to enable us to deliver our services smoothly and securely.

We may share your data with:

• Payment service providers — to process your deposits and withdrawals securely. They are required to protect your data and use it solely for payment processing purposes.
• KYC and identity verification service providers — trusted third-party providers to assist us in verifying member identities in accordance with legal compliance requirements.
• Game and platform providers — game providers partnering with elang138 may receive session data strictly required for game operation purposes only.
• Legal authorities — when required by law, court order, or direction from a relevant regulatory authority.
• Analytics services — aggregated and anonymized data used to understand usage patterns and improve our platform.

All third parties who receive your personal data are required to comply with data security standards equal to or higher than those we maintain at elang138. We conduct thorough due diligence before engaging any new service provider.

Elang138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies — Collects information about how visitors use our platform to help us improve functionality and site speed.
• Functional Cookies — Stores your preferences such as language, display settings, and login information to enhance your experience.
• Analytics Cookies — Used to understand user navigation patterns and help us improve platform content and design.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect platform functionality and you may be unable to access certain features.

Elang138 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorized access, loss, or destruction. Security is not merely a priority — it is the foundation of the trust you place in us.

Key security measures we practise include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and elang138 servers, ensuring no third party can intercept your communications.
• Two-factor authentication (2FA) available for all accounts as an additional security layer beyond the standard password.
• 24/7 security monitoring by our security team who monitors suspicious activity in real time and responds promptly whenever necessary.
• Strict internal access controls — only staff with a legitimate business need are permitted to access member personal data, and such access is logged and audited regularly.
• Periodic penetration testing conducted by independent security experts to identify and close any system vulnerabilities before they can be exploited.
• Integrated data backup ensuring your data is not lost under any technical emergency.

While we take every reasonable step to protect your data, no system in the world can guarantee absolute security. We encourage you to also safeguard your account by using a strong password and never sharing your login credentials with anyone.

As an elang138 member and in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access — You have the right to request a copy of the personal data we hold about you. We will provide this information within the timeframe stipulated by law.
• Right to Rectification — If you find that any personal data we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure ("Right to be Forgotten") — You may request that we delete your personal data under certain circumstances, subject to our legal obligations to retain specific records.
• Right to Restriction of Processing — You may request that we restrict how we process your data in certain circumstances as defined by law.
• Right to Data Portability — You may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes at any time.

To submit any request related to the above rights, please contact our data protection team via live chat in the elang138 app or visit the FAQ for further information on the procedures to follow.

Elang138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active account data — retained for as long as your account is active and for a specified period after account closure to meet audit and legal requirements.
• Financial transaction records — retained for a minimum period of seven (7) years in line with Malaysian financial and taxation legal requirements.
• KYC records and identity verification — retained for the period prescribed by applicable anti-money laundering laws.
• Communication and customer support logs — retained for two (2) years for reference and service improvement purposes.
• Cookie and analytics data — retained in accordance with the expiry period of each respective cookie, typically not exceeding two (2) years.

When data is no longer required and there is no legal obligation to retain it, elang138 will securely delete or anonymise that data using industry-recognised methods.

Elang138 strictly prohibits the use of our platform by individuals under the age of eighteen (18). Our platform is not designed for children, and we do not knowingly collect personal data from minors.

Should we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that information and close the associated account without prior notice. Parents or guardians who find that their child has registered an elang138 account are requested to contact our support team immediately via live chat.

Elang138 employs an integrated age verification system as part of the KYC process to ensure only eligible individuals can access our platform. This forms part of our commitment to responsible gaming practices.

Elang138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or platform improvements. We are committed to notifying you of any material changes.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending a notification to the email address registered to your account when changes are material in nature.
• Displaying a clear notice on our platform for a reasonable period before and after any changes take effect.

Your continued use of the elang138 platform after the effective date of any changes to this Privacy Policy will be deemed your acceptance of the updated terms. We encourage you to review this page from time to time to ensure you remain informed about how we protect your personal data.

If you have any questions, concerns or complaints regarding how elang138 handles your personal data, we strongly encourage you to reach out to us. Our data protection team is ready to assist and will respond within a reasonable timeframe.

You can reach us through the following channels:

• In-App Live Chat — The fastest way to get immediate assistance. Our support operates twenty-four hours a day, seven days a week, all year round.
• Support Email — [email protected] (displayed as plain text only; please copy this address manually into your email client).
• FAQ Page — Visit FAQ page for answers to frequently asked questions about data privacy and security.

If you are not satisfied with our response and believe your privacy rights have been violated, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant regulatory body in your jurisdiction.