At Harta138, your personal data belongs to you. This Privacy Policy explains clearly what we collect, why we collect it, how we protect it, and what rights you hold over your own information as a registered user on our Malaysian platform.
Harta138 ("we", "us", "our", or "the Platform") operates the online casino and sports betting website accessible at harta138.cam. We are committed to protecting the privacy of every individual who visits, registers on, or interacts with our Platform. This Privacy Policy ("Policy") sets out in detail the manner in which Harta138 collects, uses, stores, processes, shares, and protects the personal data of our users ("you" or "User").
This Policy applies to all personal data collected through our Website, any associated mobile-optimised interfaces, customer support channels, and payment processing interactions. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
We take the security and responsible handling of personal data seriously. The data you provide — including identification documents submitted for KYC purposes, financial transaction records, and behavioural activity on the Platform — is handled with appropriate technical and organisational safeguards as detailed in this Policy.
For the purposes of this Privacy Policy, the following terms shall bear the meanings assigned below:
Harta138 collects the following categories of personal data from users of the Platform:
Harta138 collects personal data through the following channels:
Harta138 processes your personal data for the following specified, explicit, and legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) and age confirmation (21+) | KYC data, registration data |
| Processing deposits and withdrawals (MYR transactions) | Financial data, registration data |
| Fraud prevention and anti-money laundering compliance | All categories, device data |
| Administering bonuses and promotional offers | Activity data, financial data |
| Providing customer support and dispute resolution | Registration, activity, financial data |
| Responsible gambling monitoring and intervention | Activity data, financial data |
| Platform performance analytics and product improvement | Technical data, activity data |
| Sending account-related service communications | Registration data (email, phone) |
| Complying with legal and regulatory obligations | All categories as required |
We will not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing an alternative lawful basis for doing so.
Harta138 processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:
Harta138 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
We share necessary transaction data with payment processors — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network facilitators — to execute deposit and withdrawal transactions on your behalf.
KYC data may be shared with third-party identity verification service providers engaged by Harta138 to authenticate identity documents, conduct liveness verification, and perform sanctions screening as required by applicable regulations.
Device fingerprint data, IP addresses, and behavioural signals may be shared with fraud detection and cybersecurity service providers to protect the Platform and its users from fraudulent activity, account takeover attempts, and money laundering.
Harta138 may disclose personal data to law enforcement agencies, regulatory bodies, courts of competent jurisdiction, or other governmental authorities where required to do so by applicable law, court order, or legal process, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Harta138, its users, or the public.
In the event of a merger, acquisition, reorganisation, or sale of assets involving Harta138, personal data held by the Platform may be transferred to the acquiring entity, subject to the same privacy protections as outlined in this Policy. Users will be notified of any such transfer where required by applicable law.
The Harta138 Platform uses cookies and similar tracking technologies to enable core functionality, enhance user experience, and collect analytical data. The categories of cookies we use are as follows:
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Continued use of the Platform without adjusting browser settings constitutes acceptance of our cookie usage as described above.
Harta138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or archived in accordance with our internal data lifecycle management procedures.
Harta138 implements and maintains appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to:
Subject to applicable law and certain regulatory limitations (such as AML record-keeping requirements that may restrict deletion rights), you hold the following rights in relation to your personal data processed by Harta138:
Request a copy of the personal data Harta138 holds about you and information about how it is being processed.
Request correction of any inaccurate or incomplete personal data held in your Account.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that we limit the processing of your data in specific circumstances, such as while a dispute over data accuracy is pending.
Request that we provide your personal data in a structured, machine-readable format where processing is based on your consent or a contract.
Object to processing of your personal data based on legitimate interests, including profiling, where you have grounds relating to your particular situation.
To exercise any of the above rights, please submit a written request to [email protected] (plain text — not a clickable link). We will respond to verified requests within thirty (30) calendar days. We may require identity verification before processing a data rights request to ensure we are disclosing, modifying, or deleting data only to the rightful Account holder.
Please note that certain rights are subject to limitations. For example, data retained pursuant to AML/KYC regulatory requirements cannot be deleted before the mandated retention period expires, even upon request.
The Harta138 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated Account, delete the data, and take appropriate remedial action.
The Harta138 Platform may contain references to or integrations with third-party services — including payment gateways and identity verification providers — whose privacy practices are governed by their own independent privacy policies. Harta138 does not control and is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party services you interact with.
Specifically in the context of payment processing, when you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or any other linked payment method, that transaction is subject to the relevant payment provider's own terms and data handling practices in addition to this Policy.
Harta138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where amendments are material in nature, we will endeavour to notify registered users by email to the address on file, or through a prominent notice on the Platform, prior to the amended Policy taking effect.
Your continued use of the Harta138 Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your data.
If you have any questions, concerns, or requests relating to this Privacy Policy or Harta138's handling of your personal data, please contact our Data Protection team through the following channels:
For matters concerning responsible gambling, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page or contact support directly.
This Privacy Policy was last reviewed and published on 1 January 2026. Harta138 is committed to transparent and lawful data processing. For players aged 21 and above only. Always gamble responsibly.
Six concrete measures that demonstrate our commitment to responsible data handling on the Harta138 platform.
Every data exchange between your device and Harta138's servers is encrypted using 256-bit TLS/SSL. Look for the padlock icon in your browser — your financial and personal information travels securely at all times.
We verify every account using Malaysian identity documents before processing withdrawals. This protects both you and the integrity of the platform — no impostor can access your funds without passing our verification checks.
Harta138 does not sell, rent, or trade your personal data to advertising networks or data brokers. Data sharing is limited strictly to operational partners — payment processors and verification services — necessary to deliver the platform.
Access, rectify, port, or request deletion of your personal data at any time by contacting our support team. We respond to verified data rights requests within 30 calendar days, as required.
Device fingerprinting and behavioural analytics protect your account from takeover attempts and fraudulent activity. Security signals are monitored continuously — unusual patterns trigger immediate review.
We keep your data only as long as necessary — defined retention periods for each data category, from 12-month device logs to 7-year transaction records required by financial regulations. No indefinite data hoarding.
Questions about how Harta138 handles your data? Our support team is available 24/7. We believe trust is built through transparency — not just in our odds, but in everything we do.
🔞 For players aged 21 and above only. Gamble responsibly. For help, contact Talian Kasih at 15999.