Lego138 takes the protection of every member's personal data seriously. This document transparently explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Data Protection Commitment
Every decision regarding data handling at lego138 is guided by six core principles that place the interests of Malaysian members above all else.
This Privacy Policy is published by lego138, operating under the domain lego138.run, as an online entertainment platform providing casino, Sports Betting, and digital entertainment services to users in Malaysia. We take our responsibilities seriously as a data controller under the Personal Data Protection Act 2010 (PDPA) Malaysia.
This Privacy Policy document sets out in detail how lego138 collect, record, store, use, disclose, and transfer your personal data when you use any of our services. It also outlines your rights as a data subject and how to exercise them.
This Privacy Policy applies to all individuals who register an account, access the platform, make deposits or withdrawals, use any of the games, or interact with any of our services lego138 in any manner. By using our platform, you fully agree to the terms of this Privacy Policy.
Lego138 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices or new legal requirements. Members will be notified of any material amendments via email or in-platform notification at least 7 days before the changes take effect. The most recent update date will always be displayed at the top of this document.
If you do not agree with any part of this Privacy Policy, please discontinue use of the platform lego138 and contact us to close your account. Your data will be handled in accordance with PDPA-compliant account closure procedures.
When you register and use the platform lego138, you voluntarily provide us with the following data:
| Data Category | Sample Information | Required / Optional |
|---|---|---|
| Personal Identity | Full name, date of birth, identity card number (MyKad) | Required |
| Contact Information | Malaysian phone number, email address, mailing address | Required |
| Financial Information | Bank account number, eWallet details (Touch 'n Go, GrabPay, DuitNow) | Required (for transactions) |
| Proof of Identity (KYC) | MyKad copy, bank statement, selfie for verification | Required (for withdrawals) |
| Communications | Customer support conversation records, emails to lego138 | Required (if contacting us) |
When you access the platform lego138, our system automatically collects the following technical information to ensure platform performance and security:
Lego138 does not collect sensitive personal data such as health information, political views, or religious beliefs as part of the standard registration process. Should such data be required in specific contexts (for example, a responsible gaming programme), your explicit consent will be sought beforehand.
Lego138 uses collected personal data solely for legitimate purposes directly related to providing our services to members in Malaysia. The following is a complete list of data use purposes at lego138:
Your personal data is used to create and manage your account lego138 yours, to verify your identity during registration and the KYC process, to process all deposit and withdrawal requests via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, and CIMB Clicks, and to keep your account secure from unauthorised access.
Your data enables lego138 provides access to over 500 games including slots, live casino, lottery, and Sports Betting covering the Malaysia Super League, EPL, badminton, and e-sports, along with all other services available on our platform. Your gaming activity data is also used to accurately calculate and credit winnings.
Some data is collected and retained solely to fulfil our legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) checks, mandatory reporting to Malaysian authorities where required by law, and the detection and prevention of fraud, platform misuse, and illegal activity.
Your contact details are used to send transaction notifications, respond to customer support enquiries, deliver information about changes to our terms or policies, and share relevant promotional offers (subject to your marketing communication preferences).
Lego138 will not use your personal data for purposes unrelated to the provision of our platform services, or for any purpose not permitted under Malaysian law, without first obtaining your explicit consent. You have the right to withdraw your marketing consent at any time without affecting your use of the lego138 platform.
Lego138 does not sell, rent, trade, or share members' personal data with any third party for their own marketing purposes. However, there are limited situations where your data may be shared with certain parties, all of whom are bound by strict confidentiality agreements.
To provide the services you use at lego138, we work with carefully selected third-party service providers. These include game providers (such as Pragmatic Play, Evolution Gaming, and Playtech), Malaysian payment processors for Touch 'n Go, GrabPay, DuitNow, and FPX, secure cloud and data hosting providers, and identity verification service providers for the KYC process. All these providers are bound by data protection agreements that require them to handle your data to the same high standards as lego138.
Lego138 may be required to disclose your personal data to Malaysian authorities where there is a valid court order, an investigation request from a competent authority under Malaysian law, or mandatory reporting obligations related to anti-money laundering detection. In all such cases, lego138 will disclose only the data necessary within the scope of that legal request.
When lego138 required by law to disclose your personal data to the authorities, we will endeavour to notify you in advance where the law permits. If prior notification is not permitted, we will inform you as soon as the restriction is lifted.
Certain technical service providers lego138, such as international game service providers, operate from outside Malaysia. Where data needs to be transferred outside Malaysia in this context, lego138 ensures that adequate protections are in place, whether through data protection agreements that meet international standards or applicable Malaysian legal requirements.
Lego138 continually invests in information security infrastructure and practices to ensure that members' personal data is protected against unauthorised access, disclosure, alteration, or destruction. The core security measures we have implemented are as follows:
Member personal data lego138 is retained for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Generally, financial transaction data is kept for a minimum of 7 years in accordance with applicable legal requirements. Account data is retained for the duration the account is active and for a specified period after account closure. When data is no longer needed, it is securely deleted using procedures that ensure it cannot be recovered.
Although lego138 takes comprehensive security measures; however, no online security system can be guaranteed to be 100% impenetrable. You also play an important role in protecting your account — never share your password, use a strong and unique password, and enable two-factor authentication (2FA) where available. Please report any suspicious activity on your account to the lego138 support team immediately.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject hold important rights regarding your personal data held by lego138. We respect and facilitate the exercise of all these rights.
To exercise any of the above rights, please contact the Privacy Officer lego138 via email at privacy@lego138.run or support@lego138.run with the subject line "Personal Data Rights Request". Please include your full name, lego138 account number, and details of your request. Lego138 will process your request within 14 business days and may require identity verification before proceeding with any access or data deletion requests.
Lego138 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse how the platform is used for continuous improvement.
You can control and delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use platform features. lego138 properly. We recommend keeping essential cookies enabled for the best lego138 experience.
Lego138 does not use cookies to collect sensitive data such as passwords or credit card information. All financial information, including bank account details and eWallet information (Touch 'n Go, GrabPay, DuitNow), is handled through secure payment channels and is not stored via cookies.
Lego138 has appointed a Privacy Officer responsible for ensuring compliance with this Privacy Policy and handling all enquiries, requests, and complaints relating to the protection of members' personal data.
If you have any questions about this Privacy Policy, wish to exercise your rights as a data subject, or have concerns about how lego138 handles your personal data, or to report a potential privacy breach, please reach us through the following channels:
When contacting the Privacy Officer lego138, please include the following information to help speed up processing: your full name, your lego138 account number, a clear description of your request or concern, and your preferred contact method for us to follow up. Lego138 is committed to responding to all privacy inquiries within 3 business days and resolving formal requests within 14 business days.
If you are dissatisfied with the way lego138 handles your privacy complaints, you have the right to submit a complaint to the Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for enforcing the PDPA in Malaysia.
By registering or continuing to use the platform lego138, you confirm that you have read and understood this Privacy Policy. You agree to the collection and use of your personal data as described in this document. For further enquiries, contact us at support@lego138.run.
Have concerns about your data privacy at lego138? Our Privacy Officer is ready to assist you in Bahasa Melayu.
Frequently Asked Questions