Official Data Protection

Privacy Policy elsa78
Malaysian Player Personal Data Protection

Elsa78 values the privacy of every member. This policy clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026
SSL 256-Bit Encryption
PDPA 2010 Compliant
Malaysia
Contents of This Policy
Types of Data Collected
Data Usage Purpose
Data Sharing & Disclosure
Data Security & Encryption
Your Rights as a User
Cookies & Tracking Technologies
Privacy Policy Amendments

How elsa78 Protects Your Privacy

Every step we take in managing your personal data is designed to ensure security, transparency, and full control remain in your hands.

256-bit SSL Encryption

All data transmitted between your device and elsa78's servers is protected by SSL 256-bit encryption — the same standard used by leading banking institutions in Malaysia. None of your data travels over the network without protection.

Secure KYC Verification

The elsa78 KYC (Know Your Customer) process uses fully encrypted channels. Your identification documents — such as your MyKad or passport — are only accessed by licensed verification staff and are not retained beyond the stipulated period.

Secure & Isolated Servers

Elsa78 member personal data is stored on servers isolated from other platform components. Internal access is subject to strict role-based controls, ensuring only authorised personnel can view sensitive information.

No Sale of Data to Third Parties

Elsa78 never sells, rents, or discloses your personal data to advertisers or third-party companies for marketing purposes. Your data is used solely for platform operations that have been disclosed to you.

Full Control in Your Hands

As an elsa78 member, you have the right to access, correct, or request deletion of your personal data at any time. Our team is ready to help you manage your privacy preferences through our support channels, available around the clock.

Full PDPA 2010 Compliance

All data management practices at elsa78 are designed to comply with Malaysia's Personal Data Protection Act 2010. We regularly review our internal procedures to ensure ongoing compliance with applicable legal requirements.

Full Privacy Policy of the elsa78 Platform

Please read this policy carefully. It explains your rights and elsa78's responsibilities in managing your personal data in a transparent and secure manner.

This Privacy Policy applies to all users of the elsa78 platform, including the elsa78.pro website, iOS and Android mobile apps, and all related services. By using our platform, you agree to this Privacy Policy.

1. Introduction

Elsa78 is an online sports betting and casino platform operating for the Malaysian market. We understand that your trust is the foundation of our relationship with you, and we are committed to managing your personal data with the highest level of transparency, security, and integrity.

This Privacy Policy explains how elsa78 collects, uses, stores, protects, and shares your personal information when you use our services. It also outlines the rights you hold regarding your personal data and how to exercise them.

Elsa78 is the responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and continually work to ensure our data protection practices meet or exceed applicable legal requirements.

2. Personal Data We Collect

Elsa78 collects only the personal data necessary to provide services that are safe, efficient, and compliant with regulations. We do not collect data beyond what is required for the stated purposes.

2.1 Data You Provide Directly

  • Full name as stated on your official identification document
  • Malaysian identity card number (MyKad) or passport number
  • Date of birth and gender
  • Email address and mobile phone number
  • Current residential address
  • Bank account or e-wallet details for deposit and withdrawal purposes
  • KYC documents uploaded during the identity verification process

2.2 Automatically Collected Data

  • IP address and general geographic location data
  • Device type, operating system, and web browser version
  • Activity logs within the platform, including login and logout records
  • Wagering records, transaction history, and usage patterns
  • Game session data including session start and end times
  • Cookie data and similar tracking technology data (see Section 8)
elsa78 does not directly collect credit or debit card information. All financial transactions are processed through licensed, PCI DSS-certified third-party payment processors.

3. Purpose of Personal Data Use

Elsa78 uses your personal data solely for legitimate, disclosed purposes. Below is a summary of data usage purposes:

Purpose of Use Data Type Category
Identity verification & KYC Name, IC/passport, date of birth Mandatory
Deposit & withdrawal processing Bank details, transaction records Mandatory
Account management & login Email, password (encrypted) Mandatory
Customer support & complaint resolution Communication records, activity logs Mandatory
Fraud prevention & security IP address, activity logs, usage patterns Mandatory
Responsible gaming & player protection Betting history and usage patterns Mandatory
Product improvement & user experience Usage data, feedback Options
Promotional communications & exclusive offers Email, phone number Options

For purposes categorised as "Optional", you have the right to withdraw your consent at any time by contacting the elsa78 support team, with no negative impact on your use of the platform's core services.

4. Legal Basis for Data Processing

Elsa78 processes your personal data on solid legal grounds under Malaysia's PDPA 2010. Depending on the type of data and purpose of processing, the applicable legal bases are:

  • Contract performance: Processing required to fulfil our contractual obligations to you as a member, including processing transactions and managing your account
  • Legal compliance: Processing required under Malaysian law, including KYC requirements and anti-money laundering (AML) reporting
  • Legitimate interest: Processing required for the legitimate interests of elsa78, such as fraud detection and platform security, provided it does not override your fundamental rights
  • Consent: For marketing and promotional communications, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing & Disclosure

Elsa78 does not sell your personal data. We only share your information in limited situations and for legitimate purposes, as follows:

5.1 Trusted Third-Party Service Providers

Elsa78 works with carefully selected service providers to help operate our platform. These include payment processors, cloud service providers, licensed game software providers, and customer support platforms. All such providers are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.

5.2 Legal Requirements & Authorities

Elsa78 may disclose your personal data to Malaysian government or law enforcement authorities if required to do so by law, court order, or as part of an official investigation. In such situations, we will notify you if permitted to do so by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of elsa78 assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such changes and the options available to you.

elsa78 never shares your personal data with advertisers, data brokers, or any third party for independent marketing purposes. This commitment is central to our Privacy Policy.

6. Data Retention & Deletion

Elsa78 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

  • Active account data is retained for the duration of your active membership
  • Financial transaction records retained for 7 years in accordance with Malaysian accounting legal requirements
  • KYC documents are retained for 5 years after account closure for AML compliance purposes
  • Customer support communication records retained for 2 years
  • Marketing data and cookies are deleted when you withdraw consent

When the retention period expires or you request data deletion, elsa78 will securely delete or destroy your data using industry-recognised methods to ensure it cannot be recovered.

7. Data Security

Elsa78 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL/TLS encryption for all data transmissions
  • Encryption of sensitive data in databases using AES-256
  • Role-based access control (RBAC) for internal staff
  • Two-factor authentication (2FA) for staff accounts and as an option for member accounts
  • Continuous security monitoring and intrusion detection systems
  • Regular security audits by independent third-party experts
  • Cybersecurity awareness training for all elsa78 staff
  • A comprehensive and tested data incident response plan

In the event of a data breach that may affect your rights and freedoms, elsa78 is committed to notifying the relevant authorities and affected members within the timeframe required by law.

8. Cookies & Tracking Technologies

The elsa78 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics data that helps us improve our services.

8.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collects data on how you use the platform to help us improve performance and functionality.
  • Functional Cookies: Remembers your preferences such as language and display settings for a better experience.
  • Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the elsa78 platform. For non-essential cookies, you may grant or withdraw consent at any time via the cookie settings panel available on the platform.

9. Your Rights as a User

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by elsa78. We respect and facilitate the exercise of each of these rights:

Right of Access

You have the right to obtain a copy of the personal data we hold about you and information on how it is used.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction promptly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing at any time.

Right to Withdraw Consent

For consent-based processing, you may withdraw your consent at any time without affecting core services.

Right to Complain

You have the right to lodge a complaint with the Malaysia Personal Data Protection Department if you are dissatisfied with our actions.

To exercise any of the above rights, contact the elsa78 Privacy team via 24/7 live chat or the official email address listed at the bottom of this page. We are committed to responding to your request within 14 business days.

10. Changes to This Privacy Policy

Elsa78 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Every update will include a new effective date at the top of this page.

For significant changes, elsa78 will notify you via in-app notification or email to the address registered in your account at least 14 days before the changes take effect. Your continued use of the elsa78 platform after the effective date constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your information. All previous versions of this Privacy Policy are available upon request through the elsa78 support team.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how elsa78 handles your personal data, please contact our team through the following channels:

  • 24/7 Live Chat available directly within the elsa78 platform
  • Elsa78 official privacy email: [email protected]
  • Via the "Contact Us" section in your account after logging in

Our privacy team is ready to assist you and will respond to all enquiries within 14 business days. For urgent security issues, please use the live chat channel for an immediate response.

For unresolved complaints, you may contact Malaysia Personal Data Protection Department via their official website for further assistance.
Join elsa78 Now

Your Data Is Safe With Us — Start Your Gaming Experience Today

Elsa78 combines an exciting online sports betting and casino experience with robust personal data protection. Register an account in under 2 minutes and enjoy peace of mind knowing your privacy is always safeguarded.

256-bit SSL Encryption
Malaysia PDPA 2010 Compliant
24/7 Malaysian-Language Customer Support
Bahasa Melayu