Privacy Policy Introduction & Scope
Welcome to 38vf. We understand that privacy matters deeply to every member who trusts us with their personal information. This Privacy Policy was created to provide full transparency on how we handle your data — from the moment you register until you stop using our platform.
This policy applies to all users who access the 38vf website, mobile app, and any related services we provide. It covers all personal information you share with us directly, as well as data collected automatically while you browse our platform.
38vf operates under Malaysian law and complies with the Personal Data Protection Act 2010 (PDPA). We also adopt international best practices in data protection to ensure the highest level of security for all our members across Southeast Asia.
Information We Collect
38vf collects only the information needed to provide a secure, efficient service that meets regulatory requirements. Below are the categories of data we collect:
Information You Provide Directly:
- Identity Data: Full name, national identification number (MyKad) or passport, date of birth, and gender — collected during the KYC process for identity verification.
- Contact Data: Email address, mobile number, and full address — used for account communications and transaction verification.
- Financial Data: Bank account number, account holder name, and digital wallet details — used solely for processing deposits and withdrawals.
- Login Data: Username and password stored in hashed form — to secure access to your account.
Information Collected Automatically:
- Device Data: Device type, operating system, phone model, and screen resolution.
- Network Data: IP address, internet service provider (ISP) name, and general location (state/city).
- Usage Data: Pages visited, games played, session duration, and navigation patterns within the platform.
- Cookie Data: Session cookies, preference cookies, and analytics cookies to enhance the user experience.
Data Usage Purpose
Every piece of information we collect has a clear and legitimate purpose. 38vf does not use your data for purposes not stated here without first obtaining your consent. The following are the primary purposes for which your data is used:
For marketing communications, you may withdraw consent at any time by adjusting your notification settings in your account or by contacting our support team. Withdrawing consent for marketing will not affect the core services you receive.
Data Sharing With Third Parties
38vf takes a highly cautious approach to data sharing. We do not sell, rent, or trade your personal information to any third party for commercial purposes. However, there are limited situations where data sharing is necessary and lawful:
- Payment Processors: Minimum required financial data is shared with partner banks, FPX processors, and digital wallet providers (TNG, GrabPay, Boost, ShopeePay) solely to process your transactions. All these partners are bound by strict data protection agreements.
- Game Software Providers: Game session data is shared with licensed game providers to ensure game integrity and dispute resolution where necessary.
- Regulatory Authority: Information may be shared with Bank Negara Malaysia, the Royal Malaysia Police, or relevant regulatory bodies when required by a court order or valid legal obligation.
- Analytics Services: Anonymised usage data may be processed by analytics platforms to help us understand usage patterns and improve our services.
Data Security & Protection Measures
Data security is not just an add-on feature at 38vf — it is at the core of how we build and operate our platform. We continuously invest in security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.
Technical security measures we employ:
- Encryption in Transit: All data transmitted between your browser and our servers is protected with TLS 1.3 protocol and AES-256 encryption.
- Encryption at Rest: Sensitive information such as IC numbers and financial details is stored in encrypted form using audited encryption algorithms.
- Two-Factor Authentication (2FA): An additional security layer available to all members to protect accounts from unauthorised access.
- 24/7 Monitoring: Our automated threat detection system monitors for suspicious activity around the clock and takes immediate action whenever required.
- Regular Penetration Testing: Security audits by independent third parties are conducted regularly to identify and address any system vulnerabilities.
- Internal Access Controls: Only authorised 38vf staff who require access to specific data may view it — based on the principle of least privilege.
While we take all reasonable precautions, no system can guarantee 100% absolute security. You also play an important role in keeping your account safe — ensure your password is strong, do not share your login details, and report any suspicious activity to us immediately.
Cookie Policy & Tracking Technologies
38vf uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you, remember your preferences, and keep the platform running smoothly.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting your use of the platform.
- Performance Cookies: Collecting information on how you use the platform to help us understand page performance and identify technical issues.
- Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
- Analytics Cookies: Used to analyse overall usage patterns (not individual behaviour) for product improvement purposes.
You can manage or block specific cookies through your browser settings. Please note that disabling essential cookies may affect your ability to use certain features of the 38vf platform.
Data Retention Period
38vf retains your personal data for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal requirements. The following are our data retention guidelines:
- Active Account Data: Retained for the duration your account is active and for an additional 5 years after account closure for legal compliance purposes.
- Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's accounting and anti-money laundering (AML) legal requirements.
- Security Logs: Retained for 12 months to assist in security incident investigations should any occur.
- Support Communication Data: Customer support interaction records are retained for 3 years for reference and service improvement.
- Analytics Data: Anonymised usage data is retained for 24 months and then automatically deleted.
When data is no longer needed and there is no legal requirement to retain it, 38vf will securely delete or anonymise it using approved data disposal procedures.
Your Rights as a Data Subject
Under Malaysia's PDPA and 38vf's privacy policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
Right of Access
Request a copy of all personal data we hold about you at any time. We will provide a full report within 14 working days.
Right to Rectification
Correct any inaccurate or outdated information in your account via your profile settings or by contacting our support team.
Right to Erasure
Request the deletion of your data when it is no longer needed, subject to mandatory legal retention requirements we are obliged to comply with.
Right to Object
Object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another service provider should you choose to do so.
Right to Restriction of Processing
Request that we restrict the processing of your data in specific situations, such as when you are disputing data accuracy or during a complaint investigation.
How to Submit a Privacy Request
To exercise any of the rights mentioned above, or for any enquiries regarding our privacy policy, you may contact the 38vf Data Protection Officer (DPO) through the following channels:
Contact Platform Live Chat
The fastest way — access 24/7 live chat directly from the 38vf platform. State that your request relates to "Privacy Policy" or "Data Request" and our team will assist you promptly.
Send a Formal Request Email
Send an email to our privacy team at [email protected] with the subject line "PDPA Privacy Request — [Your Username]". Please include the type of request and your account information for faster processing.
Identity Verification
We may require additional identity verification before processing your request, to protect your privacy from unauthorised requests by third parties.
Processing & Feedback
Requests will be processed within 14 business days. You will receive a confirmation and status update via the email registered to your account.
Changes to This Privacy Policy
38vf reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any significant changes will be communicated to you via:
- In-platform notification on 38vf at your next login
- Email to the registered address on your account
- Update the "Effective Date" at the top of this document
We encourage you to review this page periodically to stay informed on how we protect your information. Continued use of the 38vf platform after a change notification is considered acceptance of the updated terms.
Contact Us About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how 38vf handles your personal data, we strongly encourage you to reach out to us directly. Our Data Protection Team is available to assist you 24 hours a day, 7 days a week.
You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your privacy rights have been violated and we have failed to resolve the matter satisfactorily.
38vf is committed to resolving every privacy complaint fairly, transparently, and within a reasonable timeframe. Your trust is our most valuable asset.
Table of Contents
Privacy Summary
Related Pages
Privacy Contact
Have questions about your data privacy? Our Data Protection Officer is here to help.
Ready to Get Started?
Open your 38vf account securely — privacy protected, data encrypted, gaming guaranteed.
Register Now — Free Login