Privacy Policy gas138 – Member Personal Data Protection

Gas138 is fully committed to protecting the privacy of every member and user of our platform. This Privacy Policy applies to all individuals who:

• Visiting or browsing the gas138.fun website
• Registering and creating a gas138 member account
• Using the gas138 mobile app on any device
• Interacting with the gas138 customer support team through any channel
• Participating in gas138 promotions, competitions, or loyalty programs

We recognise that your trust is our most valuable asset. All information you share with gas138 will be handled with full integrity, transparency, and accountability.

All information we collect is used for lawful, specific purposes and will not be used beyond the stated scope. The following are the primary purposes for which gas138 uses your data:

• Account management – Creates, verifies, and maintains your member account so you can seamlessly access all gas138 services.
• Transaction processing – Processes deposits, withdrawals, bonus credits, and all financial transactions in your account accurately and promptly.
• Identity verification (KYC) – Verifies that your identity is legitimate to meet anti-money laundering (AML) compliance and fraud prevention legal requirements.
• Platform security – Detects and prevents fraudulent activity, hacking, or account abuse that could compromise your security.
• Customer Support – Enables our team to provide accurate and effective assistance whenever you contact gas138.
• Responsible gaming – Monitors wagering patterns to identify members who may need support and offers appropriate responsible gaming tools.
• Service improvement – Analyzes usage data (in anonymized form) to improve user experience, platform performance, and the games library.
• Promotional communications – Sends information about relevant promotions, bonuses, and exclusive offers (with your consent).

Protecting your data is the absolute priority of gas138. We continuously invest in the latest security infrastructure to ensure your information remains safe from unauthorized access, leaks, or misuse.

Security measures we practice include:

• 256-bit SSL Encryption – All data transmitted between your device and gas138's servers is encrypted using the latest TLS protocols, the same standard used by leading banking institutions.
• Two-factor authentication (2FA) – An additional security layer requiring verification via SMS or an authenticator app each time a login is performed from a new device.
• 24/7 Monitoring – Our security systems continuously monitor account activity to detect any signs of suspicious or unusual behavior.
• Data segregation – Sensitive information such as passwords and financial details are stored in isolated server environments with strictly controlled access.
• Regular security audits – Independent third parties conduct regular penetration testing and security audits to identify and patch any vulnerabilities.

As a responsibly operated platform, gas138 is required to conduct Know Your Customer (KYC) processes and comply with anti-money laundering (AML) legal requirements. These processes are designed to protect the platform and all members from illicit financial activities.

Documents that may be requested during the KYC process include:

• Copy of MyKad (front and back) or a valid passport
• Recent proof of address such as a utility bill or bank statement (not older than 3 months)
• Selfie holding your identity document (for additional identity verification if required)
• Proof of ownership of the payment method used for deposits

All KYC documents you submit:

• Stored in encrypted server environments with strictly limited access
• Accessible only by staff specifically authorised for KYC purposes
• Never shared with any third party unless required by law
• Retained for the period required by law before being securely deleted

Gas138 only retains your personal data for as long as necessary to fulfill the purpose for which it was collected, or for as long as required by applicable law. The following are our data retention guidelines:

• Active account data – Retained for the duration your account is active plus a minimum of 5 years after account closure to meet AML record-keeping requirements.
• Financial transaction records – Retained for a minimum of 7 years in accordance with financial services legal requirements.
• KYC Documents – Retained for the duration the account is active and a minimum of 5 years after account closure.
• Security and access logs – Retained for 12 months for security investigation purposes if required.
• Support communication data – Retained for 2 years for customer service reference.

When the retention period expires or upon a valid deletion request, your data will be securely erased using methods that ensure it cannot be recovered by any party.