Privacy Policy

Box138 Privacy Policy – Player Personal Data Protection

Your privacy is our priority. Find out exactly how box138 collects, uses, and protects every piece of your personal information with internationally recognised encryption technology.

256-bit SSL Encryption Updated: 1 January 2026 Data Not Sold

Introduction

At box138, we understand that player trust cannot be bought — it must be earned every day through concrete action. One of the ways we earn that trust is by ensuring every member's personal data is protected to the highest standard, in the most transparent way possible.

This Privacy Policy explains how box138 collects, stores, uses, and protects your personal information when you use our platform — whether through the website at box138.vu or via the box138 mobile app. It also explains the rights you hold regarding your own personal data.

Our Commitment: box138 never sells, rents, or discloses your personal data to third parties for marketing purposes without your consent. Your information belongs to you — and we protect it as if it were our own.

By using the box138 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you may choose not to use our services. We encourage you to read this document in full to understand how we handle your information responsibly.

1. Information We Collect

Box138 only collects information necessary to provide our players with a safe, efficient, and high-quality service. The following are the types of information we collect:

A. Information You Provide Directly

When you register an account, go through the identity verification process (KYC), or contact our support team, you may provide information such as:

  • Full name as per identity card
  • Identity card or passport number
  • Date of birth and gender
  • Email address and phone number
  • Residential address
  • Bank account or digital wallet details for deposit and withdrawal purposes
  • KYC supporting documents such as a copy of your ID card or utility bill

B. Automatically Collected Information

When you use the box138 platform, certain technical information is automatically collected to ensure the security and continuity of our services:

  • IP address and estimated location
  • Device type, operating system, and web browser
  • Platform usage data such as pages visited and session duration
  • Transaction information including deposits, withdrawals, and wagering history
  • Cookie data and similar tracking technologies
Important Note: box138 never collects credit card information directly. All payments are processed through third-party payment providers that comply with PCI-DSS standards, ensuring your financial data is never stored in our systems.

2. How We Use Your Information

Every piece of information we collect is used for clear and lawful purposes. Box138 uses your personal data for the following purposes:

Purpose of Use Types of Data Used
Registration and account management Name, email, phone number, password
Identity verification (KYC) Identification documents, date of birth, address
Deposit and withdrawal processing Bank account details, transaction history
Fraud prevention and anti-money laundering IP address, transaction patterns, location
Customer Support Email, account history, communication records
Promotional communications (with consent) Email, phone number
Platform improvement and analytics Usage data, device data

Box138 will not use your personal data for any purpose other than those stated above without first obtaining your consent.

3. Data Sharing & Disclosure

Box138 takes a highly cautious approach to data sharing. We does not sell your personal data to any third party. However, there are limited situations where we may need to share certain information:

  • Payment service providers: To securely process deposits and withdrawals through designated payment channels.
  • Technology service providers: Companies that help us operate our platform, servers, and security systems — all bound by strict confidentiality agreements.
  • Regulatory bodies and legal authorities: When required by law or a valid court order, we may need to disclose certain information to the relevant authorities.
  • Fraud prevention: In cases where there is strong evidence of fraud or financial crime, we reserve the right to share necessary information with the authorities.
Our Guarantee: All third parties we work with are bound by strict privacy policies and data protection agreements. We ensure that the same data protection standards are upheld by all our partners.

4. Data Security

Protecting your personal data from unauthorised access, loss, or misuse is a core responsibility of box138. We employ multiple layers of technical and organisational security to achieve this.

  • 256-bit SSL encryption: All data transmitted between your device and box138 servers is protected by robust SSL encryption, preventing anyone from intercepting your communications.
  • Strict access control: Only authorised box138 staff are permitted to access your personal data, and only to the extent required for their duties.
  • Continuous monitoring: Our systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts.
  • Two-factor authentication (2FA): We encourage all members to enable two-factor authentication for an added layer of protection on their account.
  • Secure data backup: Your data is regularly backed up on secure servers to ensure service continuity.

While we do everything we can to protect your data, no system can be guaranteed 100% secure. We encourage you to play your part by using a strong password and never sharing your login credentials with anyone.

5. Cookies & Tracking Technologies

Box138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use cookies for the following purposes:

  • Essential cookies: Required for core platform functions such as login, sessions, and security. These cookies cannot be disabled.
  • Performance cookies: Helps us understand how players use the platform for continuous improvement purposes.
  • Functional cookies: Saves your preferences such as language and display settings for your convenience.
  • Analytics cookies: Used to analyse traffic and usage patterns in aggregate — no personal information is disclosed.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the box138 platform.

6. Your Rights as a User

Box138 recognises and respects your rights regarding personal data. As a box138 member, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If any of your information is inaccurate or out of date, you have the right to request immediate correction.

Right to Erasure

You may request deletion of your personal data, subject to certain legal obligations.

Right to Object

You may object to the use of your data for specific purposes such as direct marketing.

Right to Portability

You have the right to receive your data in a machine-readable format for transfer purposes.

Right to Restriction

In certain circumstances, you may request that we temporarily restrict the processing of your data.

To exercise any of the above rights, please contact the box138 support team via the in-platform live chat. We will process your request within a reasonable timeframe.

7. Data Retention Period

Box138 retains your personal data for as long as your account is active or as long as necessary to provide services to you. When an account is closed, we will retain certain records for the period required by applicable laws and regulations, particularly for fraud prevention and regulatory compliance purposes.

  • Account and transaction data: Retained for a minimum of 5 years after account closure for legal compliance purposes.
  • Support communication records: Retained for 2 years for reference and quality control purposes.
  • Log and security data: Retained for 1 year for security monitoring purposes.
  • Marketing data: Deleted immediately upon withdrawal of your consent.

8. Changes to This Privacy Policy

Box138 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, services offered, or applicable legal requirements.

Any significant changes will be communicated to you via email or in-platform notification at least 14 days before taking effect. Continued use of the box138 platform after such notice is considered your acceptance of the updated Privacy Policy.

Recommendation: Check this page regularly to stay informed about how we handle your personal data. The effective date of the latest version is always displayed at the top of this document.

Why Your Privacy Safe with Box138?

Advanced-Grade Encryption

Every bit of data moving between your device and box138 servers is protected by 256-bit SSL encryption — the same technology used by the world's leading financial institutions.

Data Not Sold

Box138 is fully committed to never selling or renting your personal data to any third party for marketing purposes. Your information remains private and is used solely for your service.

Secure KYC Process

Your identity verification (KYC) is processed through a secure, controlled system. Documents you submit are stored with full encryption and are only accessible by authorised personnel.

24/7 Security Monitoring

The box138 security team monitors our systems around the clock to detect and address any security threats before they impact your data or account.

Full Control in Your Hands

You have full control over your personal data. Request access, correct, or delete your information at any time through our responsive support team.

Industry Standard Compliance

Box138's privacy practices comply with international industry standards, including PCI-DSS requirements for payment data, ensuring you receive the highest level of protection.

Frequently Asked Questions Privacy

Not at all. Box138 never sells, rents, or discloses your personal data to third parties for marketing or commercial purposes. Your data is used solely to provide services to you and to fulfil relevant legal obligations.

You can contact the box138 customer support team via the in-platform live chat at any time. State that you wish to make a personal data access request (Subject Access Request). We will process your request within a reasonable timeframe and provide a copy of your data in an easy-to-read format.

When your account is closed, box138 will retain certain records for the period required by law — typically 5 years for financial transaction records. This is a standard regulatory compliance requirement. Data no longer needed for legal purposes will be deleted on a scheduled basis.

Yes, absolutely. Box138 does not directly store your credit or debit card information. All payment transactions are processed through third-party payment providers compliant with PCI-DSS security standards. Your bank account details used for withdrawals are stored with full encryption within our systems.

Play Safe & With Confidence

Your data is safe with us. Register a box138 account today and enjoy a gaming experience protected by internationally certified security technology.

Register Now Download App
Bahasa Melayu