Your privacy matters to us. This policy explains in plain, formal English exactly what personal data batman138 collects, why we collect it, how it is used and protected, and what rights you have as a Malaysian player on our platform.
Six commitments that define batman138's approach to player privacy and personal data protection.
All data transmitted between your device and batman138's servers is protected by 256-bit SSL/TLS encryption. Payment data, login credentials, and KYC documents are never transmitted in plaintext under any circumstances.
Batman138 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used exclusively for the purposes set out in this Privacy Policy.
Malaysian players have the right to access, correct, update, and request deletion of their personal data at any time, subject to applicable legal retention requirements. Submit requests via our 24/7 live chat support.
Personal data is stored on secured, access-controlled servers with strict role-based permission controls. Data is retained only as long as necessary for the purposes for which it was collected, or as required by applicable law.
Batman138 applies a data minimisation principle — we collect only the personal information that is strictly necessary to operate the platform, verify identities, process payments, and comply with regulatory obligations.
In the unlikely event of a data security breach that affects your personal information, batman138 will notify impacted players promptly and take immediate remedial action in accordance with our incident response protocol.
This Privacy Policy ("Policy") is issued by Batman138 ("batman138", "Company", "we", "our", "us"), the operator of the online gaming platform located at https://batman138.cam and any associated sub-domains, mobile interfaces, or applications. This Policy governs the collection, use, storage, disclosure, and protection of personal data belonging to all registered and prospective users ("Player", "you", "your") of the batman138 platform.
Batman138 is committed to protecting the privacy and personal data of all players, including those accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations across Malaysia. We process personal data in compliance with applicable data protection laws and regulations, including those applicable in the jurisdictions relevant to our operations.
By registering an account, depositing funds, claiming a bonus, placing a bet, or otherwise using any service offered by batman138, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the batman138 platform.
This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and batman138.
This Policy was last reviewed and updated on 1 January 2026. We recommend revisiting this page periodically to stay informed of any changes to how your data is handled.
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, online identifiers, and behavioural data collected through platform usage.
Batman138 — the entity that determines the purposes and means of processing personal data collected through the batman138 platform.
Any third-party service provider that processes personal data on behalf of batman138, under contract and subject to batman138's data processing instructions. This includes payment processors, KYC verification providers, and fraud detection services.
Any operation performed on personal data, whether by automated means or otherwise, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for specified purposes, as provided by the data subject at the time of account registration or as subsequently updated through account settings.
Know Your Customer identity verification materials, including Malaysian national identity cards (MyKad), passports, proof of address documents, and payment method verification materials submitted by players to comply with account verification requirements.
Small text files stored on a player's device by the batman138 website, used to maintain session state, remember user preferences, enable security features, and support analytical functions as described in Section 8 of this Policy.
Batman138 collects the following categories of personal data from players during the registration process, throughout account usage, and in connection with the provision of our services:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, Malaysian mobile number, residential address | Account communications, support responses, regulatory notices |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow), transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML compliance |
| KYC Documents | MyKad photograph, passport scan, utility bill, bank statement, selfie for identity matching | Identity verification, regulatory compliance, withdrawal authorisation |
| Gameplay Data | Betting history, game sessions, win/loss records, bonus claims, wagering activity | Account management, responsible gambling monitoring, dispute resolution |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, session timestamps | Security monitoring, fraud detection, platform performance analysis |
| Preference Data | Preferred games, language settings, notification preferences, deposit limit settings | Personalisation of platform experience, responsible gambling tools |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Customer service delivery, quality assurance, dispute evidence |
Batman138 does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where specifically required by applicable law or regulation — for example, problem gambling self-declaration data collected for responsible gambling purposes.
Batman138 collects personal data through the following channels and mechanisms:
Personal data you provide directly to batman138 includes information submitted at account registration (name, date of birth, contact details), KYC documents uploaded through the account verification portal, payment method details entered during deposit or withdrawal transactions, correspondence submitted via live chat or email support, and any information provided through participation in promotions, surveys, or competitions.
When you access and use the batman138 platform, certain data is collected automatically through technical means including server logs, session cookies, and browser-based data collection tools. This includes your IP address, device identifiers, browser configuration, pages visited within the platform, time spent on each section, and game session metadata. This automated data collection is necessary for platform security, fraud prevention, and performance optimisation.
Batman138 may receive personal data about you from authorised third-party sources, including identity verification and KYC service providers who validate document authenticity, payment processors including FPX partner banks, e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), and DuitNow network participants where payment information is shared as part of transaction processing, and fraud intelligence services that provide risk signals based on known fraud patterns.
Batman138 does not purchase personal data lists from data brokers or conduct any form of unsolicited data acquisition. All third-party data received is subject to the same protection standards applied to directly collected data.
Batman138 processes personal data on one or more of the following legal bases, depending on the specific processing activity concerned:
Batman138 uses the personal data collected from players for the following purposes:
To create, maintain, and administer your batman138 account, including processing registration information, verifying identity through KYC, managing account security settings, and facilitating login and authentication.
To process deposit transactions via Malaysian payment channels — including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — and to process withdrawal requests to verified payment methods in MYR.
To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulations, including transaction monitoring, suspicious activity reporting, and retention of transaction records for the prescribed statutory periods.
To monitor gameplay patterns for indicators of problem gambling behaviour, to enforce player-configured deposit limits, session time controls, and self-exclusion periods, and to enable batman138's responsible gambling team to intervene where there is a concern for a player's wellbeing. Batman138 is committed to responsible gambling and treats all welfare data with the highest degree of sensitivity.
To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, duplicate account creation, and other forms of prohibited conduct, using a combination of automated fraud detection systems and manual review processes.
To respond to your support enquiries, resolve account disputes, process complaints, and provide assistance through our 24/7 live chat service and email support channel.
To analyse anonymised and aggregated usage data in order to improve the batman138 platform, optimise user experience, identify technical issues, and plan future feature development.
Batman138 does not sell personal data to third parties. Personal data may, however, be disclosed to the following categories of recipients where necessary and appropriate:
All third-party data processors engaged by batman138 are contractually bound by data processing agreements that prohibit the use of player data for any purpose beyond that for which it was originally shared, and that require equivalent or higher security standards to those applied by batman138.
Batman138 uses cookies and similar tracking technologies on its platform for the following purposes. When you first visit batman138, you will be presented with a cookie consent notice, and you may update your cookie preferences at any time through your browser settings.
These cookies are essential for the platform to function correctly and cannot be disabled without preventing you from using batman138. They are used to maintain your logged-in session state, remember items in your account queue, and support core security features including CSRF protection and secure session management. No consent is required for strictly necessary cookies.
With your consent, batman138 uses analytical cookies to understand how players interact with the platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This data is used in aggregated form only to improve the platform experience. Individual user data is not shared with third-party analytics providers in personally identifiable form.
Functional cookies remember your preferences — such as your preferred language setting, notification preferences, and whether you have acknowledged specific notices — to provide a more personalised and consistent experience across visits.
You may configure your browser to decline, delete, or restrict cookies at any time. Note that disabling certain categories of cookies may impair the functionality of the batman138 platform, including session management and security features. Instructions for managing cookies are available through your specific browser's help documentation.
Batman138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, batman138 will securely delete or anonymise the data in a manner that prevents recovery.
Batman138 implements a multi-layered technical and organisational security framework designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:
While batman138 maintains robust security controls, no system is entirely immune to security risks. You also have an important role to play — use a strong, unique password for your batman138 account, enable two-factor authentication, and never share your login credentials with anyone.
As a player on batman138, you have the following rights in relation to your personal data, subject to applicable legal limitations and batman138's legitimate operational interests:
To exercise any of the rights above, please contact batman138's support team via live chat within your account dashboard. We will acknowledge your request within 3 business days and respond substantively within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with prior notification.
Please note that certain rights may be limited where fulfilling a request would conflict with batman138's legal obligations — for example, AML record-keeping requirements that mandate retention of transaction data beyond your requested deletion period.
Batman138's primary servers and data processing infrastructure are operated within jurisdictions that provide an adequate level of data protection. Where personal data is transferred outside of Malaysia to third-party data processors — such as international KYC verification services or fraud intelligence platforms — batman138 ensures that appropriate safeguards are in place to protect the transferred data.
Such safeguards may include the execution of standard contractual clauses that impose equivalent data protection obligations on the recipient, the use of data processing agreements requiring compliance with applicable privacy standards, and binding corporate rules where applicable.
By using batman138, players acknowledge that their personal data may be transferred to and processed in countries outside Malaysia for the purposes described in this Policy. Batman138 takes all reasonable steps to ensure that such transfers are conducted securely and in compliance with applicable legal requirements.
Batman138 is strictly an adult entertainment platform. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process requires players to confirm that they are at least 21 years old, and our KYC verification process includes mandatory age confirmation through identity document review.
If batman138 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will promptly suspend the relevant account, delete the collected personal data to the extent permitted by applicable law, and refer the matter to our compliance team for further review.
If you are a parent or guardian and believe that a person under 21 in your care has registered on batman138 or submitted personal data to the platform, please contact our support team immediately via live chat so that the account can be reviewed and appropriate action taken without delay.
Batman138 enforces a strict 21+ minimum age policy. Age verification is conducted on all accounts as part of KYC requirements. Accounts where the holder cannot confirm they are 21 or older will be suspended.
The batman138 platform may contain references to, or integrations with, third-party services including Malaysian payment providers (Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX), game studio interfaces, and customer support tools. Batman138 does not control the privacy practices of these third-party services, and this Privacy Policy does not apply to personal data you submit directly to those third parties in connection with their own services.
Batman138 recommends that you review the privacy policies of any third-party service you interact with in connection with your batman138 account. Batman138 is not responsible for the privacy practices, content, or security of any third-party service or website, even where links or integration points are present within the batman138 platform.
Batman138 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. Material changes to this Policy — particularly those that affect how player personal data is used or shared — will be communicated to registered players via in-platform notification or email prior to taking effect, where technically feasible.
Continued use of the batman138 platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept a revised Policy, you should cease using batman138 and contact our support team to discuss account closure.
The most current version of this Privacy Policy is always accessible at https://batman138.cam/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Previous versions of this Policy are available upon request from our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or to batman138's handling of your personal data, please contact us through the following channels. All privacy-related communications will be handled by batman138's designated data compliance function.
Our data support team operates on Malaysian Time (MYT, UTC+8) and provides full English-language assistance. When submitting a data rights request, please provide sufficient information to allow us to verify your identity before processing any request that would disclose, modify, or delete personal data.
Batman138 is committed to responding to all formal privacy-related requests within 30 calendar days of receipt. Complex requests may take up to 60 days, and you will be notified of any extension with an explanation prior to the standard deadline expiring.
Our 24/7 support team can help with data access requests, account queries, or any concern about how batman138 handles your personal information. We're here for Malaysian players around the clock.