Privacy Policy oline138 – Your Data Security is Our Priority

This Privacy Policy was established by oline138 to transparently explain our data handling practices to all platform users. It applies to all ways you interact with oline138 — whether through the oline138.net website, the Android and iOS mobile apps, or any of our official communication channels.

Oline138 takes our responsibilities under the Personal Data Protection Act 2010 (PDPA Malaysia) seriously. We ensure that every piece of data collected has a clear purpose, is stored securely, and is never misused under any circumstances.

By registering or using the oline138 platform, you consent to us processing your personal data as described in this Privacy Policy. If you do not agree, you have the right to discontinue using the platform and request deletion of your data as described in Section 7.

Oline138 only collects data necessary to operate the platform safely and effectively. Below are the categories of data we collect and the reasons for doing so:

Oline138 does not collect sensitive information such as medical data, religious beliefs, or political views. All data collected is strictly limited to what is necessary for platform operations.

Data collected by oline138 is used solely for legitimate and transparent purposes. We will not use your data for purposes unrelated to platform operations without first obtaining your consent.

Purpose of data use:

• Account management: Creating and maintaining your oline138 account, including processing registration and verifying login.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely in Malaysian Ringgit.
• KYC Verification: Meeting legal obligations under anti-money laundering (AML) regulations and know your customer (KYC) policies.
• Platform security: Detecting and preventing fraud, unauthorized access, and other harmful activities.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance to members.
• Platform improvements: Analyzing usage patterns on an aggregate basis (not individually) to improve the user experience.
• Account-related communications: Sending OTP notices, transaction alerts, and important policy updates.

The security of your personal data is a responsibility that oline138 takes seriously. We implement multiple layers of technical and organizational protection to keep your data safe at all times.

oline138 technical security measures:

• 256-bit SSL Encryption: All data transmitted between your device and oline138 servers is encrypted using TLS 1.3 with 256-bit keys — the same standard used by leading financial institutions.
• Encryption of data at rest: Personal data stored in oline138 databases is also encrypted using AES-256 — even in the event of a data breach, your information cannot be read by unauthorised parties.
• Layered access controls: Only oline138 staff who require access to specific data to carry out their authorised duties are permitted — based on the principle of least privilege.
• 24/7 Monitoring: A threat detection system operates around the clock to identify and respond to any suspicious activity.
• Two-factor authentication (2FA): OTP and biometric authentication are available to all members through the oline138 app.

Data retention period: oline138 retains your personal data for the duration of your active membership and for an additional 7 years after account closure to meet financial record-keeping and legal requirements. Data that is no longer needed will be securely deleted or anonymised.

Oline138 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, we share necessary data with the following parties under limited and controlled circumstances:

• Payment processors: The payment gateway handling your DuitNow, FPX and e-wallet transactions only receives the information required to process the transaction — nothing more.
• KYC service providers: Third parties that assist in verifying member identities through document verification processes. They are bound by strict confidentiality agreements.
• Cloud service providers: Data is stored on trusted cloud servers certified to international security standards.
• Legal authorities: oline138 will disclose data when required by Malaysian law or a valid court order — including AML reports to the relevant authorities.

All third parties that oline138 works with are bound by data protection agreements ensuring they handle your information to a standard equal to or higher than that of oline138 itself.

Oline138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser or device when you visit the oline138 website.

Types of cookies used:

• Essential Cookies: Required for core platform functionality — including login authentication, session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the oline138 platform to help us improve our services. This data is collected in aggregate and does not identify individuals.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details (if you choose to save them) for your convenience.
• Security Cookies: Used to detect suspicious activity, prevent fraud and protect the integrity of user sessions.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the oline138 platform.

Under Malaysia's PDPA and oline138's privacy policy, you have the following rights regarding your personal data. oline138 is committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact the oline138 support team via in-platform live chat. We may require identity verification before processing any data-related request.

The oline138 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should oline138 discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Any account suspected to have been created by a minor will be suspended immediately pending investigation.

If you are a parent or guardian who believes your underage child has registered an account at oline138, please contact our support team immediately via live chat on the platform.

The oline138 platform may reference third-party services such as payment gateways or game providers. This Privacy Policy applies solely to the oline138 platform and does not cover the privacy practices of those third parties.

Oline138 recommends reading the privacy policy of every service provider you use to understand how they handle your data. oline138 is not responsible for the privacy practices of third parties beyond our control.

All payment gateways integrated with oline138 — including DuitNow, FPX, and e-wallet processors — have undergone oline138 security assessments and are required to comply with equivalent data protection standards.

If you have any questions, concerns or requests regarding the oline138 Privacy Policy or the handling of your personal data, our team is ready to assist through the following channels:

• Live Chat: The fastest option — available 24/7 via the chat icon on the platform or the oline138 app. Average response time is under 3 minutes.
• Email: For more detailed written enquiries, you may contact the olin138 privacy team at [email protected]. We will respond within 2 working days.

This Privacy Policy may be updated from time to time to reflect changes in law, technology or oline138 operations. Members will be notified of material amendments at least 7 days before they take effect. The latest version is always available on this page.