Buaya138 Privacy Policy — Protection of Your Personal Data

1Introduction & Scope of Buaya138's Privacy Policy

Buaya138 ("we", "Platform", "Buaya138") values the privacy of every member who uses our platform at buaya138.ws. This Privacy Policy explains in detail how we collect, use, store, protect, and disclose your personal data when you use Buaya138's services.

This policy applies to all registered members and visitors to the Buaya138 website, including those accessing the platform via mobile devices, apps, or any other digital channel associated with Buaya138. By registering or using the Buaya138 platform, you agree to the data collection and usage practices described in this Privacy Policy.

Buaya138 operates in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, the principal legislation governing personal data protection in Malaysia. We are committed to ensuring your privacy rights are respected and upheld at all times.

2Types of Personal Data Collected

Buaya138 only collects personal data that is strictly necessary to provide members with a quality service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable law. All data is collected directly from you during registration, platform use, or communication with the Buaya138 support team.

3How Buaya138 Uses Your Personal Data

Personal data collected by Buaya138 is used solely for legitimate, stated purposes. The following are the primary purposes for which member data is used:

• Account Management: Creating, verifying, and maintaining your Buaya138 member account. This includes the KYC (Know Your Customer) process to confirm that members are aged 18 and above.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawals to your registered bank account or eWallet.
• Customer Service: Providing effective technical support and customer service, including resolving enquiries, complaints, and account-related issues.
• Security & Fraud Prevention: Identifying and investigating any suspicious activity, fraud attempts, money laundering, or misuse of the Buaya138 platform.
• Platform Improvement: Analysing usage patterns to improve Buaya138's products, services, and platform interface for the benefit of all members.
• Marketing Communications: Sending bonus offers, promotions, and updates on new games — only to members who have opted in to receive such communications. You may unsubscribe at any time.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to Buaya138 under Malaysian law.

4Third-Party Data Sharing & Disclosure

Buaya138 does not sell or rent members' personal data to any third party for their own marketing purposes. However, in certain limited circumstances, we may need to share your data with the following parties:

• Payment Service Providers: Malaysian payment gateway providers such as DuitNow, FPX, and eWallet processors (Touch 'n Go, GrabPay, Boost, ShopeePay) that help us process financial transactions securely. They are bound by strict confidentiality agreements.
• Technology Service Providers: Companies that provide technology infrastructure, cloud services, or gaming platforms to Buaya138. All such parties are subject to binding data protection agreements.
• Malaysian Authorities: Law enforcement agencies, regulatory bodies, courts, or other authorities when required by applicable Malaysian law or a valid court order.
• Audit & Compliance Partners: Independent auditors or compliance consultants engaged to help Buaya138 ensure platform operations comply with all applicable regulations. Their access to data is strictly limited and controlled.

In all cases of data sharing, Buaya138 ensures that recipient parties adhere to data protection standards equivalent to or higher than our own. We never permit third parties to use member data for their own purposes outside the agreed scope.

5Buaya138's Data Security Measures

The security of members' personal data is Buaya138's highest priority. We implement a range of technical and organisational security measures to protect your information from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your browser and Buaya138's servers is encrypted using the latest TLS/SSL protocols, ensuring no third party can intercept your communications.
• Two-Factor Authentication (2FA): Buaya138 provides an additional layer of security through an OTP (One-Time Password) sent to your registered phone number during login or withdrawal.
• 24/7 Monitoring: Buaya138's cybersecurity team monitors our systems around the clock to detect and respond to any threats or suspicious activity in real time.
• Internal Access Controls: Only Buaya138 staff who require access to specific data to perform their duties are permitted to do so, in accordance with the principle of least privilege.
• Regular Data Backups: Member data is automatically backed up at regular intervals to a secure, separate location to ensure service continuity in the event of a system failure.
• Penetration Testing: Buaya138 conducts regular security assessments by independent third parties to identify and remediate system vulnerabilities before they can be exploited.

6Data Retention Period

Buaya138 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active and for seven (7) years following account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial Transaction Data: All deposit and withdrawal records are retained for seven (7) years for audit, tax compliance, and fraud investigation purposes where necessary.
• Customer Service Communication Logs: Live Chat conversation records, emails, and support tickets are retained for three (3) years from the date of the last communication.
• Analytics & Usage Data: Data collected through analytics cookies and platform usage logs is retained for two (2) years before being anonymised or deleted.

Once the applicable retention period has lapsed, Buaya138 will securely delete or anonymise your personal data in accordance with approved data disposal procedures, so that it can no longer be linked to you as an individual.

7Buaya138 Cookie Policy

Buaya138 uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies: Storing your personal preferences such as language, time zone, and display settings to ensure a more comfortable experience on your next visit.
• Analytics Cookies: Helping us understand how members use the Buaya138 platform — including the most frequently visited pages, time spent, and navigation patterns — so we can continuously improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, such as suspicious login attempts or multiple accounts being accessed from a single device.

You can manage or delete cookies through your web browser settings. Please note that disabling certain types of cookies may affect the functionality and user experience of the Buaya138 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

8Member Rights Regarding Personal Data

As a Buaya138 member, you have the following rights regarding your personal data under Malaysia's PDPA:

To exercise any of the rights above, please contact the Buaya138 team via 24/7 Live Chat or by email at support@buaya138.ws. We will process your request within 14 business days from the date a complete request is received.

9Children's & Minors' Privacy

The Buaya138 platform is strictly intended for individuals aged 18 years of age and above. We do not knowingly collect, store, or process the personal data of children or minors.

Should Buaya138 discover that personal data belonging to a minor has been collected without our knowledge — whether through fraudulent account registration or any other means — we will take immediate action to:

• Immediately close the relevant account and block any further access to the platform.
• Permanently delete all personal data belonging to the minor from our systems as promptly as possible.
• Reporting the incident to the relevant authorities where required by law.

If you believe a minor has registered an account on Buaya138, please contact us immediately at support@buaya138.ws so that we may take appropriate action without delay.

10Amendments to Buaya138's Privacy Policy

Buaya138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant operational reasons.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying in-platform notifications on Buaya138 to keep members informed of any changes.
• Sending email notifications to your registered address for significant changes that require your immediate attention.

Members are responsible for reviewing this Privacy Policy periodically. Continued use of the Buaya138 platform following any amendments constitutes acceptance of the updated Privacy Policy.

11How to Contact Buaya138 Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Buaya138 handles your personal data, please do not hesitate to reach out to us through the following channels:

• 24/7 Live Chat: Available directly on the Buaya138 platform for immediate assistance at any hour of the day or night.
• Privacy Email: support@buaya138.ws — for written enquiries requiring a detailed response or official documentation.

We commit to acknowledging receipt of every privacy enquiry within 2 business days and provide a full response within 14 business days from the date of receipt. Should your issue require a more thorough investigation, we will keep you informed of progress within the same timeframe.