At Hero138, we take your privacy seriously. This Policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights you hold as a user of the Hero138 platform.
Hero138 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data belongs to you — full stop.
All data transmitted between your device and the Hero138 platform is protected by industry-standard TLS/SSL encryption, preventing interception by unauthorised parties.
You have the right to access, correct, and request deletion of your personal data held by Hero138 at any time, subject to our legal retention obligations.
We collect only the personal data necessary to deliver our services, comply with licensing requirements, and maintain the security of your account. No unnecessary data collection.
Hero138 does not engage in unauthorised automated profiling or decision-making that produces legal or similarly significant effects on you without your explicit awareness.
When material changes are made to this Privacy Policy, Hero138 will notify registered users via the platform or registered email address, with the revised Policy published here.
This Privacy Policy ("Policy") is issued by Hero138 ("we", "us", "our", "the Platform") and applies to all personal data collected, processed, stored, and used in connection with the Hero138 website accessible at hero138.cam and all associated services.
Hero138 is committed to protecting the privacy of all users ("you", "your", "User") who access the Platform. This Policy sets out the lawful basis on which we process your personal data, the categories of data we collect, the purposes for which it is used, and the rights available to you in relation to that data.
By accessing or registering on the Hero138 platform, you acknowledge that you have read, understood, and accepted the practices described in this Policy. If you do not agree with any aspect of this Policy, you should immediately discontinue use of the Platform and contact us to arrange closure of any existing account.
For the purposes of this Policy, the following terms carry the meanings set out below:
Hero138 collects personal data across several categories depending on your interaction with the Platform. The following table summarises the data categories, specific data points, and the context in which they are collected:
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number (MyKad / Passport / Driver's Licence) | Registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, state — e.g., Kuala Lumpur, Penang, Johor Bahru) | Registration; account updates |
| Financial Data | Payment method identifiers (Maybank2u account reference, Touch 'n Go eWallet ID, GrabPay, DuitNow proxy, FPX bank reference), transaction history, deposit and withdrawal amounts in MYR | Deposit / withdrawal processing; KYC |
| Gaming Activity Data | Bet history, game session logs, win/loss records, bonus usage, wagering patterns | During active game sessions |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, referring URL | Automatically upon Platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact our support team |
| Preference Data | Notification preferences, language settings, responsible gambling tool configurations (deposit limits, session limits) | Account settings; self-service tools |
The majority of personal data we hold about you is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in promotions, or update your account preferences.
When you access the Hero138 platform, certain technical and analytical data is collected automatically via cookies, log files, pixel tags, and similar tracking technologies. This includes your IP address, browser characteristics, device identifiers, and browsing behaviour on the Platform.
In limited circumstances, Hero138 may receive personal data about you from third parties, including:
Hero138 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases relied upon are:
Hero138 uses the personal data we collect for the following purposes:
Hero138 does not sell, rent, licence, or otherwise transfer your personal data to third parties for their own independent marketing or commercial purposes. This commitment is absolute and unconditional.
We share personal data with carefully selected third-party service providers who process data on our behalf, solely for the purposes described in this Policy. These include:
All service providers are contractually required to implement appropriate data protection safeguards and are prohibited from using your personal data for any purpose other than those specified in our data processing agreements.
Hero138 may disclose your personal data to regulatory authorities, law enforcement agencies, licensing bodies, or courts of competent jurisdiction where required to do so by applicable law, regulation, or lawful order. In such circumstances, Hero138 will disclose only the minimum data necessary to satisfy the relevant legal obligation.
In the event of a merger, acquisition, sale of assets, or restructuring involving Hero138, your personal data may be transferred to the relevant successor entity as part of the transaction. You will be notified of any such transfer and the Privacy Policy governing your data following the transfer.
Hero138 operates under international licensing and may use service providers whose infrastructure is located outside Malaysia. As a result, your personal data may be transferred to and stored in servers located in countries other than your country of residence. Where such transfers occur, Hero138 ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to internationally recognised data protection standards.
By using the Hero138 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia, and you consent to such transfers on the terms described in this Policy.
Hero138 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.
Cookies are small text files placed on your device by the Hero138 platform when you visit. They serve a range of functions essential to the operation, security, and improvement of the Platform.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Hero138 platform. Strictly necessary cookies cannot be disabled via browser settings without impacting your ability to use the Platform.
Subject to applicable data protection laws, you hold the following rights in relation to your personal data held by Hero138. To exercise any of these rights, please contact us via live chat or at the email address provided in Section 16.
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
You have the right to request correction of inaccurate or incomplete personal data held by Hero138 about you.
You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations under applicable regulations.
You may request that we restrict processing of your personal data in certain circumstances pending resolution of a disputed accuracy or processing concern.
Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
You have the right to object to processing of your personal data based on legitimate interests, including processing for direct marketing purposes.
Hero138 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
While Hero138 takes every reasonable precaution to protect your data, no data transmission over the internet or method of electronic storage is entirely secure. You are responsible for maintaining the security of your Account credentials and for notifying us immediately of any suspected unauthorised access.
The Hero138 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.
Parents and guardians who believe that a minor may have registered on the Hero138 platform are encouraged to contact us immediately via live chat or at the support email address provided in Section 16 so that we may take prompt corrective action.
The Hero138 platform does not contain links to third-party websites, social media platforms, or external services beyond those necessary for the delivery of our core gaming and payment processing services. Where integration with third-party payment services — such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — is required to process your transactions, you may be redirected to those providers' own secure interfaces.
Hero138 is not responsible for the privacy practices of any third-party payment processors or services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your Hero138 Account.
Hero138 reserves the right to update, revise, or replace this Privacy Policy at any time. When material changes are made, we will notify registered users by means of a prominent notice on the Platform or via the email address registered to your Account, with the updated Policy published on this page bearing a revised effective date.
Your continued use of the Hero138 platform following the publication of a revised Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must cease using the Platform and contact us to close your Account.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact Hero138 through the following channels:
Available 24/7 via the live chat widget on the Hero138 platform. Recommended for urgent data rights requests or account-related privacy concerns. Our team aims to acknowledge all privacy requests within 24 hours.
You may reach us at: [email protected]
Do not transmit copies of identity documents or payment information via email. Upload documents only through the secure in-platform verification portal.
Our Privacy Policy works alongside our Terms & Conditions and Responsible Gambling guidelines. We encourage every player to read all three before getting started. Questions? Our 24/7 support team is always available.
For players aged 21 and above only. Hero138 is committed to protecting your personal data. Play responsibly.