1. Introduction
Terbang128 is a digital entertainment platform operating for users in Malaysia. We understand that your trust is the most valuable asset we have, and a large part of that trust depends on how we handle your personal information.
This Privacy Policy is written to explain honestly and transparently — in plain language — how terbang128 collects, stores, uses, and protects your personal data. This is not merely a document written to satisfy legal requirements, but a genuine reflection of our commitment to member privacy.
This policy applies to all data we collect through the terbang128 website, our mobile app (Android and iOS), and any communications between you and our team. It should be read together with Terms and Conditions us.
2. Data We Collect
Terbang128 collects data in two main categories:
A. Data You Provide Directly:
- Full name as shown on your official identification document
- Identity card number (MyKad) or passport number
- Date of birth and gender
- Email address and phone number
- Bank account or e-wallet details for payment purposes
- Identity verification documents uploaded during the KYC process
- Any communications you send to our support team
B. Data Collected Automatically:
- IP address and device information (operating system, device model, web browser)
- Platform usage data including pages visited and session duration
- Deposit and withdrawal transaction history
- History of game activity (game type, wagering amount, results)
- General location data based on IP address
- Cookies and session tracking data
| Data Type | How Collected | Requirements |
|---|---|---|
| Personal Identity | Registration & KYC | Mandatory – legal compliance |
| Payment Information | Deposit/withdrawal process | Mandatory – for financial transactions |
| Device & IP Data | Automatic upon access | Security & Verification |
| Game History | Automatic during gameplay | Audit & responsible gaming |
| Cookie Preferences | Based on consent | User experience enhancement |
3. Purpose of Data Collection
Terbang128 uses the data collected for the following purposes:
- Member account management: Creating, verifying, and managing your account on the platform.
- Financial transaction processing: Processing deposits, withdrawals, and any money-related transactions.
- Legal compliance (KYC/AML): Meeting Know Your Customer (KYC) requirements and applicable anti-money laundering (AML) laws.
- Platform Security: Detecting and preventing fraud, bot activity, and any suspicious behaviour.
- Service improvement: Analysing usage patterns to improve platform quality, enhance the user interface, and add new features.
- Service communications: Sending important notices related to your account, service updates, and responses to support enquiries.
- Responsible gaming: Monitoring gaming patterns to identify and support members who may need responsible gaming assistance.
- Marketing communications (with consent): Sending information about promotions and new offers if you have given consent to receive such communications.
4. Legal Basis for Processing
All personal data processing by terbang128 is based on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and related regulations:
- Contract performance: Processing required to provide you with the terbang128 platform services.
- Legal Obligations: Processing required to meet legal compliance obligations such as KYC and AML.
- Legitimate interest: Processing for platform security, fraud prevention, and service improvement purposes.
- Consent: For marketing communications and optional cookie usage, we will request your express consent.
5. Data Sharing
Terbang128 only shares your personal data in the following circumstances and with selected parties:
- Payment service providers: Payment processors such as FPX, DuitNow, and e-wallet providers that require data to process your transactions securely.
- Game software providers: Gaming companies such as Evolution Gaming and Pragmatic Play that operate live casino tables, with only the minimum data required for game operations.
- Technology infrastructure providers: Cloud server providers and technical support services that help us operate the platform securely.
- Legal authorities: Government agencies, regulatory bodies, or legal authorities when required by law or court order.
All third parties who receive your data are required to comply with strict security and privacy standards and are permitted to use that data only for the specified purposes.
6. Cookies & Tracking Technologies
Terbang128 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
- Functional Cookies: Saving your preferences such as language and display settings for a more personalised experience.
- Analytics Cookies: Helping us understand how users interact with the platform for improvement purposes. This is done using anonymised data.
- Performance Cookies: Tracking platform performance data to ensure optimal speed and stability.
You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect platform functionality.
7. Data Storage & Security
Terbang128 stores your personal data on secure servers protected with 256-bit SSL encryption – the same security level used by Malaysia's leading banking institutions. Our servers are safeguarded by multi-layered firewalls, intrusion detection systems, and round-the-clock security monitoring.
Security measures we practise:
- Data encryption in transit (SSL/TLS 256-bit) and at rest
- Two-factor authentication (2FA) is available for all member accounts
- Strict internal access controls — only authorised staff may access sensitive data
- Regular security monitoring and audits conducted by our internal security team and independent third parties
- Security incident response procedures that are in place and tested regularly
Data Retention Period:
Terbang128 retains your personal data for as long as necessary to fulfil the original purpose of collection and applicable legal requirements. Generally, financial transaction data is retained for a minimum of five (5) years as required by financial regulations, while inactive account data will be reviewed after two (2) years of inactivity.
8. Your Rights
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. Requests can be made via our live chat or support email.
If you find any data that is inaccurate or outdated, you have the right to request a correction. Please contact customer support with the relevant supporting evidence.
Under certain circumstances, you may request that we delete your personal data. However, this may not be fully possible if the data is required to fulfil legal obligations.
You have the right to object to the processing of your data for direct marketing purposes at any time. This right also applies to processing based on our legitimate interests in certain circumstances.
You have the right to receive your personal data in a structured, machine-readable format for your own use.
To exercise any of the above rights, please contact the terbang128 customer support team via live chat or email. We will process your request within thirty (30) business days.
9. Children's Data
Terbang128 strictly prohibits the use of its platform by individuals under the age of 18. We do not knowingly collect or process personal data of children. Should we discover that data of an underage individual has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.
If you suspect that an underage individual has accessed our platform, please notify us immediately through our customer support channels.
10. Changes to Privacy Policy
Terbang128 reserves the right to update or amend this Privacy Policy at any time. Such changes may be necessary due to legal developments, new technologies, or changes in how we operate our services.
For material changes, we will provide appropriate notice via:
- A clear notice within the terbang128 platform when you log in
- Email to all registered active members
- Update the "Updated" date at the top of this page
Your continued use of the terbang128 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
11. Contact Us
If you have any questions, concerns, or wish to exercise any of your rights regarding personal data, the terbang128 privacy team is ready to assist.
- Live Chat: Available on the terbang128 web platform and mobile app, 24 hours a day
- Email: [email protected]
- General Support: [email protected]
- FAQ: Visit page FAQ us for answers to frequently asked questions
We are committed to responding to all privacy-related enquiries within thirty (30) days of receipt. For urgent matters, please include "URGENT: Privacy" in your message subject line.
Data protection is not merely a legal obligation for us — it is part of terbang128's DNA from day one.
256-Bit SSL Encryption
All data transmitted between your device and terbang128 servers is protected with 256-bit encryption – the same level used by Malaysia's major banks to secure internet banking transactions.
Segregated Fund Account
Your funds are held in an account completely separate from the company's operational funds. This is not just best practice – it is our commitment that your money always remains yours.
Regular Security Audits
Terbang128 conducts regular internal and independent security audits to identify any system vulnerabilities before they can be exploited. Your security is an ongoing priority, not a one-time review.
Strict Access Control
Only authorised terbang128 staff who have undergone background checks are permitted to access sensitive player data. All access is logged and monitored.
Two-Factor Authentication
Protect your account with an extra layer of security through two-factor authentication (2FA). Even if someone knows your password, they still cannot access your account without the OTP code.
Malaysia PDPA Compliance
Terbang128 is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are respected and protected in accordance with applicable legal provisions.
Now you know how terbang128 protects your privacy. Join over 500,000 members who have trusted us for a safe and responsible digital entertainment experience.