Collect Only What Is Needed
jawa138 collects personal data that is directly necessary to open and run your account, process MYR transactions, verify your identity, and provide responsible gambling tools. We do not collect data speculatively.
🔒 Data & Privacy · jawa138
Your Privacy Matters at
Your Privacy Matters at
jawa138
This Privacy Policy explains what personal information jawa138 collects when Malaysian players create accounts, make MYR deposits, place bets, and contact support — and how that information is handled, protected, and kept secure.
Last Updated: 1 January 2026Please read this policy before using jawa138
By registering an account, making a deposit via Maybank, Touch 'n Go eWallet, DuitNow, or any other supported method, or otherwise using jawa138, you confirm that you have read and accepted this Privacy Policy. It applies together with the jawa138 Terms & Conditions and is effective from 1 January 2026.
Our Commitment to You
How jawa138 Protects Your Data
These six principles summarise the approach jawa138 takes to your personal information. The complete legal clauses below this section govern all data handling in full.
Never Sell Your Information
Your personal details — name, IC number, bank account, contact information — are never sold, rented, or traded as a commercial product to any third party. Your data is yours.
256-bit Encryption in Transit
All data exchanged between your device and jawa138 is encrypted using TLS. Payment credentials processed via FPX, DuitNow, and eWallet providers travel through encrypted channels only.
Meaningful User Rights
You have the right to request a copy of the personal data jawa138 holds, ask for corrections, object to certain uses, and request deletion where no overriding retention obligation applies.
Defined Retention Periods
Data is kept for as long as required to deliver services, meet financial-records obligations, satisfy identity-verification requirements, or resolve open disputes — then deleted or anonymised.
Transparent and Responsive
If this policy changes materially, jawa138 will display a prominent notice. Questions about your data receive substantive responses — not template replies — through our 24/7 support team.
Full Document
Privacy Policy — Complete Clauses
The following sections form the complete privacy policy of jawa138. They cover how personal information is collected, the purposes for which it is used, the conditions under which it may be shared, retention practices, cookie use, your rights, and how to contact us.
Introduction and Scope
This Privacy Policy applies to all personal data processed by jawa138 in connection with the jawa138 website, account services, casino games, sportsbook, promotional programmes, loyalty scheme, payment processing, customer support channels, and any related digital services. It applies to players based in Malaysia and elsewhere who access jawa138.
References to "jawa138", "we", "us", or "our" mean the operator of the jawa138 platform. References to "you" or "player" mean any individual who registers, uses, or accesses jawa138. References to "personal data" or "personal information" mean any information that can identify you, directly or in combination with other data held by jawa138.
This policy should be read together with the jawa138 Terms & Conditions, which contain additional provisions relevant to account access, payments, bonuses, and responsible gambling.
Definitions
Account Data means your registered username, password hash, account preferences, verification status, responsible gambling settings, and session records.
Identity Data means your full legal name, date of birth, nationality, Malaysian IC or passport details, and selfie verification images submitted during KYC.
Contact Data means your registered email address, mobile number, and residential address.
Financial Data means deposit amounts, withdrawal requests, payment method identifiers, transaction references, and balance records denominated in MYR or other accepted currencies.
Usage Data means device type, operating system, browser, IP address, session duration, pages visited, game and betting activity logs, and bonus interactions.
Communications Data means support chat transcripts, email correspondence, complaint records, and any other written exchanges between you and jawa138.
Data We Collect
3.1 Information You Provide Directly
When you register a jawa138 account, you provide Contact Data, Identity Data, and Account Data. During the KYC process, you provide Identity Data including a government-issued identity document such as a Malaysian IC or passport, a proof-of-address document such as a Tenaga Nasional or Indah Water bill or bank statement issued within the previous three months, and a selfie verification image.
When you make deposits via Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, credit or debit card, or supported cryptocurrency, you provide Financial Data and payment-method identifiers. When you contact jawa138 support, you provide Communications Data.
3.2 Information Collected Automatically
jawa138 automatically collects Usage Data when you access the platform. This includes device and browser information, IP address and general geographic region, session timestamps, pages and games accessed, betting and wagering records, and platform interaction events such as bonus claims and withdrawal requests. This information is used for security, fraud prevention, performance optimisation, and product improvement.
3.3 Information from Third Parties
jawa138 may receive confirmation data from identity-verification providers engaged to cross-reference the documents you submit during KYC. Payment processors may provide transaction status information relevant to your account. Fraud-screening services may provide risk-score signals used to assess the security of account activity.
Purposes and Legal Basis for Processing
jawa138 processes your personal data for specific, documented purposes. The principal purposes and the basis on which each is carried out are summarised below.
| Purpose | Data Categories Used | Basis |
|---|---|---|
| Account registration and management | Account Data, Contact Data, Identity Data | Contract performance |
| Identity and age verification (KYC) | Identity Data, Contact Data | Legal obligation; contract |
| Processing deposits and withdrawals | Financial Data, Identity Data | Contract performance |
| Fraud prevention and security monitoring | Usage Data, Identity Data, Financial Data | Legitimate interests; legal obligation |
| Responsible gambling controls | Account Data, Financial Data, Usage Data | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Communications Data, Account Data | Contract performance; legitimate interests |
| Platform analytics and improvement | Usage Data (aggregated or pseudonymised) | Legitimate interests |
| Regulatory compliance and record retention | All categories as required | Legal obligation |
jawa138 does not use your personal data for automated profiling that produces significant legal effects without human review, and does not use sensitive data categories beyond what is strictly required for identity verification and age confirmation.
Sharing of Personal Data
jawa138 does not sell personal data. Data may be shared with carefully selected third parties only where necessary to deliver services or comply with obligations, including:
- Payment processors and banking partners: Maybank, CIMB, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, card networks, and cryptocurrency infrastructure providers require transaction identifiers, device data, and account references to execute and settle payments.
- Identity verification providers: Specialist KYC services receive document images and personal details to confirm identity and age.
- Game studio operators: Licensed international studio partners receive player session identifiers for fair-play auditing, RNG certification, and dispute-resolution purposes. Game studios do not receive full identity or financial data.
- Fraud and security providers: Risk-screening services receive pseudonymised usage and device signals to detect and prevent unauthorised access, bonus abuse, and financial fraud.
- Professional advisers: Legal counsel, auditors, and insurers receive data under strict confidentiality obligations where necessary for professional engagements.
- Regulatory and law enforcement bodies: Competent authorities may receive data where jawa138 is under a legal duty to disclose, for example in relation to anti-money-laundering investigation or a court order.
All third-party processors are required to handle jawa138 player data securely, use it only for the specified purpose, and not disclose it further without authorisation.
Data Retention
Personal data is retained for as long as required to fulfil the purposes described in this policy or to meet applicable legal and regulatory obligations, whichever is longer. Principal retention periods include:
- Account and identity records: Retained for the duration of the active account relationship and for a period after closure to satisfy financial-records and KYC obligations.
- Transaction records: Financial and payment data is retained in accordance with applicable accounting and anti-money-laundering standards.
- Support and dispute records: Communications Data related to account disputes, bonus queries, or payment issues is kept until the matter is fully resolved and any applicable appeal or limitation period has passed.
- Usage Data: Pseudonymised session and analytics data may be held for longer periods in aggregated form for statistical and product-improvement purposes, where it can no longer be attributed to an individual.
When data is no longer required, jawa138 deletes or irreversibly anonymises it. Deletion requests from players are honoured where no overriding retention obligation applies to the relevant data category.
Cookies and Similar Technologies
jawa138 uses cookies and comparable session technologies to operate core platform functions, remember preferences, detect fraud signals, and understand how players navigate the website. The categories in use are described below.
| Category | Purpose | Can Be Declined? |
|---|---|---|
| Maintain login session, prevent request forgery, enforce security controls and responsible gambling limits | No — required for jawa138 to function | |
| Remember display preferences, language settings, and game history for convenience | Yes — disabling limits personalisation | |
| Aggregate usage patterns to improve platform performance and identify technical issues | Yes — data collected is pseudonymised |
jawa138 does not use advertising-network or cross-site tracking cookies. Your browser settings allow you to manage or delete cookies stored by the platform. Disabling essential cookies will prevent normal account access and gameplay.
International Data Transfers
jawa138 operates with infrastructure, game studio partners, and payment processors located in multiple countries. Where personal data is transferred outside Malaysia to a country without an equivalent data-protection framework, jawa138 uses contractual protections, data-processing agreements, or other appropriate safeguards consistent with responsible data governance practices to ensure that your information receives comparable protection.
Cross-border data flows are limited to what is necessary for the purposes described in Clause 4. Identity Data is not transferred internationally except where directly required for licensed KYC-service operations that cannot be performed domestically.
Your Control
Your Privacy Rights
As a jawa138 player, you have meaningful rights over the personal data we hold about you. These rights apply to your Identity Data, Contact Data, Account Data, Financial Data, and Communications Data, subject to legal and regulatory retention obligations that may limit deletion in certain cases.
To exercise any of the rights listed here, contact the jawa138 support team. We will acknowledge your request promptly and respond substantively within a reasonable timeframe. For complex requests involving large datasets or third-party coordination, we may require a reasonable period to gather and verify the relevant information before responding.
Right of Access
Request a copy of the personal data jawa138 holds about your account, identity, transactions, and support history.
Right to Correction
Ask us to correct inaccurate or outdated personal data held in your jawa138 account profile or KYC records.
Right to Deletion
Request removal of your personal data where no overriding legal retention obligation — such as KYC or financial records — requires jawa138 to retain it.
Right to Object
Object to processing carried out on the basis of legitimate interests where your particular circumstances create a compelling ground for objection.
Right to Restriction
Ask jawa138 to restrict use of your data while a correction request or objection is being evaluated, without requiring full deletion.
Right to Portability
Where technically feasible, receive a structured, machine-readable copy of personal data you provided to jawa138 so it can be transferred to another service.
How jawa138 Secures Your Data
Security is not a marketing claim at jawa138 — it is an operational requirement. The following technical and procedural controls are actively maintained to protect your personal information and financial records.
- TLS 1.3 encryption for all data in transit between your device and jawa138 servers
- One-way hashing for account passwords — jawa138 staff cannot read your password
- Strict role-based internal access controls — only authorised personnel can access player data relevant to their function
- Regular independent security audits covering platform infrastructure and data handling processes
- Multi-layer fraud detection monitoring account, payment, and wagering activity in real time
- Encrypted storage for sensitive identity documents submitted during KYC
- Incident response procedures with defined containment, notification, and review protocols
Additional Provisions
Further Policy Terms
Minors and the 21+ Requirement
jawa138 is strictly available to individuals aged 21 and above. We do not knowingly collect personal data from minors. Age is verified as part of the KYC process, and accounts found to belong to individuals under the minimum age requirement are permanently closed.
Any personal data collected from an account subsequently identified as belonging to a minor is deleted or anonymised as promptly as feasible, subject to any legal obligation to retain records for fraud or regulatory investigation. If you believe a minor has submitted data to jawa138, please contact us at [email protected] so we can investigate promptly.
Responsible Gambling and Data Processing
Personal and behavioural data — including deposit frequency, session duration, loss patterns, and self-exclusion status — is used to support responsible gambling obligations. This includes monitoring for signs of potentially harmful behaviour, enforcing deposit limits and self-exclusion instructions, and ensuring that players who have restricted their accounts are not targeted with promotional communications.
Responsible gambling processing is carried out because it forms part of our duty of care and may be required under applicable operational obligations. Players may access, review, and adjust their responsible gambling settings through the account dashboard. For guidance, the jawa138 Responsible Gambling page provides further detail on available tools.
Marketing Communications
jawa138 may send you account-related communications — such as deposit confirmation, withdrawal status, KYC requests, security alerts, and responsible gambling notices — as part of normal service delivery. These are not marketing and cannot be fully opted out of while the account is active.
Promotional communications about bonus offers, seasonal campaigns, or loyalty programme updates are sent only where you have not opted out. You may update your marketing preferences at any time through your account settings or by contacting support. Opting out of promotional messages does not affect service communications.
jawa138 does not send promotional messages to players who have self-excluded or who have active account restrictions related to responsible gambling.
Changes to This Privacy Policy
jawa138 may update this Privacy Policy to reflect changes in data handling practices, service features, payment integrations, or applicable requirements. The effective date at the top of this page reflects when the current version took effect. Where a change is material — meaning it alters how your data is used in a way that is not merely technical or administrative — we will post a clear notice within the platform.
Continued use of jawa138 after a revised policy is published constitutes acceptance of the updated terms. We recommend reviewing this page periodically. If you disagree with a change and cannot continue on that basis, you may close your account in accordance with the Terms & Conditions.
Complaints and Contact
If you have a question about this Privacy Policy, wish to exercise a data right, or believe your personal information has been handled incorrectly, contact the jawa138 customer support team. Live chat is available 24 hours a day, seven days a week, and email support is available at:
Customer Support Email: [email protected]
Please provide your registered account identifier, the nature of your query, and relevant dates or reference numbers where available so that we can respond accurately. We will not ask you to send your password, full payment card number, or one-time authentication codes.
Where a complaint is not resolved to your satisfaction through jawa138 support, you may consider referring to an appropriate data protection authority or seeking independent advice.
Keep Exploring jawa138
Your Data is Safe. Your Play is Yours.
Now that you understand how jawa138 handles your information, explore the platform with confidence. Review our full account terms, learn about responsible gambling tools, or head to the homepage to see current offers — available to players aged 21 and above.