Gila138 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you hold over your information.
Gila138 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting website accessible at gila138.cam. We understand that the personal data you share with us — during registration, identity verification, deposit transactions, and day-to-day use of the Platform — deserves the highest standard of care and transparency.
This Privacy Policy ("Policy") sets out in clear terms: what personal data Gila138 collects from users ("you", "User", "Player"), the legal bases on which we process that data, the purposes for which it is used, with whom it may be shared, how long it is retained, and what rights you hold with respect to your data. This Policy forms part of Gila138's overall legal framework alongside our Terms & Conditions.
By accessing the Platform and creating an Account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree to this Policy, you must not register an Account or use the Platform.
Our Core Commitment: Gila138 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is used exclusively for the purposes described in this Policy — nothing more.
The following terms have the meanings assigned to them below throughout this Policy:
Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to a person's identity.
Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
The entity that determines the purposes and means of processing personal data — in this case, Gila138.
A third party that processes personal data on behalf of Gila138, under instruction and pursuant to a data processing agreement.
Identity verification documents and associated data submitted by a User during the Know Your Customer verification process, including government-issued ID, proof of address, and selfie photographs.
Small text files stored on your device by the Platform's web server for the purposes of session management, preferences, and analytics.
Sensitive personal data categories including health data, financial vulnerability indicators, or information relating to problem gambling behaviour — processed by Gila138 solely for responsible gambling compliance purposes.
Gila138 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes and lawful bases for processing your personal data, and for ensuring that our Data Processors handle your data in accordance with this Policy and applicable data protection standards.
Gila138 operates under international online gaming licensing. Our data processing practices are designed to comply with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We acknowledge that Malaysian users may also have rights under Malaysian law, including the Personal Data Protection Act 2010(PDPA) where applicable to our operations serving Malaysian residents.
For all data protection enquiries, requests, or complaints, please contact us via live chat or email at [email protected]. We aim to respond to all data-related requests within 30 calendar days.
Gila138 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table provides a comprehensive overview:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration / KYC |
| Contact Data | Email address, mobile phone number, residential address | Registration |
| KYC Documents | MyKad / NRIC image, Driver's Licence, Passport, proof of address, selfie with ID | KYC verification |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), FPX / DuitNow reference data, transaction history | Deposits & withdrawals |
| Account Activity Data | Login history, game sessions, bet history, wagering patterns, bonus usage, win/loss records | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Site visits / logins |
| Communication Data | Live chat transcripts, email correspondence, support ticket content, dispute records | Customer support interactions |
| Responsible Gambling Data | Self-exclusion requests, deposit limit settings, cooling-off periods, session time data | RG tool usage |
| Cookie / Analytics Data | Page views, referal sources, session duration, feature interaction events | Platform browsing |
Data Minimisation: Gila138 collects only the data that is necessary for the stated purposes. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions unless legally required for anti-fraud or sanctions screening purposes.
Gila138 collects personal data through the following primary channels:
Data you provide directly when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, responding to surveys, or participating in promotions. This includes all information entered into forms on the Platform.
Technical and behavioural data collected automatically when you visit or use the Platform, including via cookies, web server logs, and analytics tools embedded in the Platform. This data is collected passively as part of standard platform operation.
Data received from third-party service providers, including: payment processors (Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet); identity verification and KYC service providers; fraud detection and anti-money laundering screening services; and analytics providers. All such third parties are contractually bound to handle data in accordance with applicable data protection standards.
Gila138 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:
Gila138 uses the personal data we collect for the following purposes:
Gila138 does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals, except where such processing is required for fraud prevention or regulatory compliance, in which case you may request human review of any automated decision.
Gila138 does not sell personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
Transaction data is shared with payment processors (including FPX, DuitNow, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay and similar) solely to the extent required to facilitate deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
KYC document data may be transmitted to third-party identity verification service providers engaged by Gila138 to perform document authentication and biometric matching. These providers act as Data Processors under our instruction.
We may share data with fraud detection platforms, sanctions screening services, and anti-money laundering compliance tools as required to detect and prevent financial crime.
Gila138 will disclose personal data to competent authorities — including law enforcement agencies, gaming regulators, and financial intelligence units — where required to do so by law, court order, or regulatory obligation. We will notify affected users of such disclosures where legally permissible.
We engage third-party technology providers (including cloud hosting, content delivery, and analytics platforms) who may process personal data in the course of providing their services to Gila138. All such providers are bound by contractual data processing agreements requiring compliance with applicable data protection standards.
No Sale of Data: Under no circumstances does Gila138 sell, rent, lease, or broker personal data to advertising networks, data brokers, or any other commercial third parties for marketing or profiling purposes.
Gila138 operates globally and may transfer personal data to servers or service providers located in jurisdictions outside of Malaysia. Where such transfers occur, Gila138 takes appropriate steps to ensure that your data receives a comparable level of protection to that afforded under internationally recognised data protection principles.
Safeguards employed for international data transfers include: contractual data processing agreements incorporating standard data protection clauses; data processing agreements with service providers subject to independent certification schemes; and transfers to jurisdictions that Gila138 has assessed as providing adequate data protection standards.
If you wish to obtain further information about the specific safeguards applicable to your data transfers, please contact us at the details provided in Section 17.
Gila138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years post-closure | Legal / AML obligation |
| KYC Documents | Duration of Account + 5 years post-closure | Regulatory requirement |
| Financial Transaction Records | Minimum 7 years | Financial record-keeping law |
| Bet & Game History | Duration of Account + 3 years | Dispute resolution / compliance |
| Customer Support Records | 3 years from last interaction | Legitimate interest |
| Cookie / Analytics Data | 13 months maximum | Analytics standard practice |
| Self-Exclusion Records | Duration of exclusion + 5 years | Responsible gambling obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Whereisation is used, the resulting data may be retained indefinitely for aggregate analytical purposes as it no longer constitutes personal data.
Gila138 uses cookies and similar tracking technologies to provide, maintain, and improve the Platform. The following categories of cookies are deployed:
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Gila138 does not deploy third-party advertising or retargeting cookies.
Gila138 implements a multi-layered information security programme to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
Your Responsibility: You are responsible for maintaining the security of your Account login credentials. Gila138 will never ask for your password via email, chat, or telephone. If you suspect any unauthorised access to your Account, contact our support team immediately via live chat.
Subject to applicable law and certain conditions, you hold the following rights in relation to your personal data held by Gila138:
Request a copy of all personal data Gila138 holds about you, along with information about how it is being processed.
Request correction of inaccurate or incomplete personal data held by us. We will act on valid requests within 30 days.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to our legal retention obligations.
Request that we limit processing of your data in certain circumstances, such as where you contest its accuracy or object to our use of it.
Request your personal data in a structured, commonly used machine-readable format for transfer to another service, where technically feasible.
Object to processing based on legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty.
Lodge a complaint with us or with the relevant data protection authority in your jurisdiction if you believe your rights have been infringed.
To exercise any of the above rights, please contact our Data Protection contact via live chat or email at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond fully within 30 calendar days. We may require identity verification before processing certain requests to protect against unauthorised access to your data.
The Gila138 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is enforced at registration and through our KYC process.
If Gila138 becomes aware that personal data has been collected from a person under 21 years of age, the Account will be immediately suspended, all data associated with the underage Account will be securely deleted to the extent permitted by legal retention obligations, and any funds deposited will be returned to the originating payment method.
Parents and Guardians: If you have reason to believe that a minor under your care has registered an Account on Gila138, please contact our support team immediately via live chat or at [email protected]. We will investigate and act promptly.
The Platform does not contain links to third-party websites, social media platforms, or external services as a general practice. Where links to third-party payment method providers (such as Maybank2u or Touch 'n Go eWallet) are referenced for informational purposes, accessing those third-party platforms is subject to the privacy policies of the respective providers, not this Policy.
Gila138 is not responsible for the privacy practices of any third-party payment processor, bank, or service provider that you choose to use in connection with your Account. We recommend reviewing the privacy policy of each third-party provider before sharing personal data with them.
Gila138 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Where material changes are made, we will provide reasonable notice to registered Users via email notification or a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of and consent to the revised terms. If you do not agree to a revised Policy, you must cease using the Platform and may request Account closure.
For any questions, concerns, or requests relating to this Privacy Policy or Gila138's data processing practices, please reach out through the following channels. We take all privacy enquiries seriously and aim to resolve them promptly.
Privacy protection isn't just a legal requirement for us — it's a foundational commitment to the trust Malaysian players place in our platform.
Every byte of data transmitted between your browser and Gila138's servers is protected by bank-grade 256-bit SSL/TLS encryption — the same standard used by Maybank2u and CIMB Clicks.
Gila138 has never sold, rented, or traded personal data to any third party for marketing, profiling, or commercial purposes — and never will. Your data serves only the purposes described in this Policy.
KYC documents, financial records, and account data are stored in separate, independently secured systems with strict access controls and audit logging for all data access events.
Our data processing practices are designed with awareness of the Malaysia Personal Data Protection Act 2010 (PDPA) and international data protection standards, reflecting our commitment to Malaysian players.
We don't hide your data rights in footnotes. Section 13 of this Policy lists all eight of your data rights in plain language, with clear instructions on how to exercise each one.
We retain personal data only as long as legally required or operationally necessary. Our data retention schedule is published in Section 10 — transparent, specific, and enforced.
Our support team is available 24/7 in English, Bahasa Melayu, and Chinese. For formal data requests, email us with the subject line "Data Rights Request" and we'll respond within 30 days.
⚠️ Gila138 is for adults aged 21 and above only. Please play responsibly.