Official Document

Lego138 Privacy Policy — Personal Data Protection for Malaysian Players

Your privacy is our priority. This document clearly explains how lego138 collects, uses, stores, and protects your personal information — so you can play with peace of mind and full confidence.

Updated: January 2026
Bahasa Malaysia
SSL 256-bit Active
Estimated reading time: 7 minutes
Applicable to all Malaysian users
Data protected by end-to-end encryption
PDPA Compliant
Latest policy applied

Quick Summary: lego138 only collects data necessary to operate its services. We do not sell your information to third parties for marketing purposes. All data is stored with 256-bit SSL encryption and protected in accordance with international security standards.

1. Introduction

Lego138 ("we", "Platform", or "company") is committed to protecting the privacy of every member who uses the lego138.vu platform and our mobile app. This Privacy Policy explains what information we collect, the purposes for which it is used, how we store and protect it, and the rights you hold over your own personal data.

By registering for or using any lego138 service, you are deemed to have agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account. This Privacy Policy should be read together with Terms and Conditions us.

We take seriously the trust you place in us when sharing your personal information. Every decision regarding data handling is made with our members' interests and safety as the top priority.

2. Information We Collect

Lego138 collects information from you in several ways — directly when you register or use the platform, and automatically through industry-standard tracking technologies. Below are the categories of information we may collect:

2.1 Information You Provide Directly

  • Account Information: Full name, email address, phone number, date of birth, and password upon registration.
  • Identity Verification (KYC): MyKad copy, recent bank statement, or other verification documents required to process withdrawals or meet compliance requirements.
  • Payment Information: Bank account number, account holder name, and financial institution name. We do not store credit card numbers or sensitive payment details directly — these are processed through certified payment gateways.
  • Communications: Conversation records with our customer support team, including live chat transcripts and emails.

2.2 Automatically Collected Information

  • Device data: Device type, operating system, phone model, screen resolution, and app version.
  • Network data: IP address, internet service provider (ISP) name, and general location based on IP.
  • Usage data: Pages visited, time spent on each page, games played, bets placed, and general navigation patterns.
  • Cookie data: Session cookies, preference cookies, and analytics identifiers to understand how you interact with our platform.
Data Category Example Primary Purposes
Personal Identity Name, date of birth, MyKad Account Verification & KYC
Contact Information Email, phone number Communication & Account Recovery
Financial Data Bank account number Deposit & Withdrawal
Technical Data IP address, device type Security & Fraud Detection
Usage Data Games played, active time Service Improvements

3. How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. We do not use your data for any other purpose without first obtaining your consent. Below are the primary purposes for which data is used:

  • Account Management: Creating, verifying, and maintaining your member account on the lego138 platform.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your gaming activity.
  • Legal Compliance: Meeting KYC requirements, anti-money laundering (AML) obligations, and reporting duties to relevant authorities when required.
  • Platform Security: Detecting and preventing fraud, account abuse, collusion, and any other security threats.
  • Customer support: Responding to inquiries, resolving complaints, and providing technical support to members.
  • Service Improvements: Analyzing usage patterns to improve the gaming experience, enhance platform speed, and refine features members value most.
  • Promotional Communications: Sending information about bonuses, promotions, and the latest offers — only to members who have opted in to receive them.

Lego138 never uses your data to make automated decisions that could materially affect your rights without human review. Every significant decision relating to your account is reviewed by our team.

4. Data Storage & Security

The security of your data is a responsibility we take very seriously. lego138 implements multiple layers of technical and organizational protection to ensure your information is always safe from unauthorized access, loss, or misuse.

4.1 Technical Security Measures

  • 256-bit SSL Encryption: All data transmitted between your device and lego138 servers is protected with bank-grade encryption.
  • Stored Data Encryption: Sensitive information such as passwords and financial data is stored in encrypted form (hashed and encrypted) that cannot be read even by internal staff.
  • Two-Factor Authentication (2FA): 2FA is available for all accounts as an added layer of security during login.
  • 24/7 Monitoring: Our active threat detection system monitors suspicious activity around the clock and automatically responds to any intrusion attempts.
  • Regular security audits: Penetration testing is conducted regularly by independent security firms to identify and patch any vulnerabilities.

4.2 Data Retention Period

Lego138 retains your personal data for as long as your account is active and for the period required by law or legitimate business needs. In general:

  • Active account data is retained for as long as your account exists on the platform.
  • Financial transaction records are retained for a minimum of 7 years in accordance with financial compliance requirements.
  • Log and security data is retained for 2 years for investigation purposes if required.
  • Following account closure, your personal data will be deleted or anonymized within 90 days, unless we are required by law to retain it for longer.

5. Data Sharing with Third Parties

Lego138 does not sell, rent, or transfer your personal information to third parties for their own marketing purposes. However, there are specific situations where data sharing is necessary to operate our services effectively:

  • Payment Service Providers: Payment gateways and financial institutions required to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
  • Game Providers: Gaming software companies, such as slot providers and Live Casino platforms, receive only the minimum session data required to run the games properly.
  • Legal Authorities: lego138 will disclose information to the police, courts, or regulatory bodies when required by law or court order.
  • Technical Service Providers: Companies that help us operate our technical infrastructure, including cloud and security services, are bound by strict data processing agreements.

All third parties who receive your data are contractually bound to use it solely for the specified purpose and must comply with security standards equal to or higher than those of lego138 itself.

6. Cookies & Tracking Technologies

Lego138 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and maintain the security of your session. Below are the types of cookies we use:

  • Essential Cookies: Required for basic platform functionality such as login verification and session management. These cookies cannot be disabled as they are critical to platform operation.
  • Performance Cookies: Collecting anonymous data on how you use the platform — pages visited, time spent, and errors encountered — to help us improve the platform.
  • Preference Cookies: Saving your settings such as preferred language and display preferences so you do not need to reconfigure them every time you log in.
  • Security Cookies: Helps detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your browser preferences at any time. However, disabling essential cookies may affect the functionality of the lego138 platform.

7. Your Privacy Rights

As a lego138 user, you have the following rights over your personal data. We respect each of these rights and will process any request within 14 business days.

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

If any of your information is inaccurate or incomplete, you may request that we correct it.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing a reason.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another platform.

Right to Restriction

You may request that we restrict the processing of your data in certain situations, such as during a data dispute.

8. Children's Data

Lego138 does not provide services to individuals under the age of 18. We do not knowingly collect personal data from minors. Should we discover that information from an underage individual has been collected, that data will be deleted immediately and the associated account will be terminated.

If you believe a minor has registered an account on our platform, please contact our support team immediately so that appropriate action can be taken promptly.

9. Changes to the Privacy Policy

Lego138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made, we will notify members via their registered email or an in-platform notification at least 7 days before the changes take effect.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. We encourage you to revisit this page periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions, concerns, or wish to exercise any of the privacy rights outlined in this document, please contact the lego138 Privacy & Compliance team through the following methods:

  • Live Chat: Available 24 hours a day, 7 days a week, directly within the lego138 platform or app.
  • Email: [email protected] — we will respond within 2 business days.

For privacy-related requests, please clearly state your full name, registered account number, and the type of request so we can process your application more efficiently. All privacy-related communications are handled confidentially by our dedicated team.

Banking-Grade Privacy Protection

Lego138 invests seriously in security infrastructure and data privacy so every member can play with peace of mind, free from concern about the safety of their personal information.

256-bit SSL Encryption

All data transmitted between your device and lego138 servers is protected with bank-grade encryption — the same standard used by leading financial institutions worldwide.

Secure KYC Process

Identity verification is conducted through secure, encrypted channels. Your documents are reviewed only by trained staff and are not shared with unrelated parties.

No Data Sales

Lego138 has never and will never sell your personal information to advertisers or data brokers. Your data is used solely to deliver the services you request.

24/7 Threat Monitoring

Our advanced threat detection system continuously monitors all suspicious activity, keeping your account protected even while you sleep.

Full Control in Your Hands

You may access, correct, or request deletion of your data at any time. We give you real control over your personal information without burdensome procedures.

International Standards Compliance

The lego138 Privacy Policy is designed in line with global online gambling industry best practices and PDPA requirements that protect Malaysian users.

Privacy Guaranteed — Join lego138 with Confidence

With banking-grade data protection and a full commitment to your privacy, lego138 is a platform you can trust completely. Register today and enjoy a safe, fair, and enjoyable gaming experience.

SSL 256-bit
Active Encryption
Secure KYC
Verified Identity
Confidential Data
No Data Sales
24/7 Support
Privacy Support
Bahasa Melayu