🔒 Official sms123 Document

Privacy Policy sms123 – Malaysia Member Personal Data Protection Commitment

Sms123 is committed to protecting the privacy of all our members in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This document explains what data we collect, how we use it, and your rights as a member.

Updated: 1 January 2026  |  Version 2.4

Privacy Principles sms123

Six core commitments that form the foundation of how sms123 handles the personal data of every Malaysian member.

Full PDPA Protection

All personal data processing at sms123 is carried out in full compliance with Malaysia's Personal Data Protection Act 2010. Your rights as a data subject are respected and protected in every aspect of our platform's operations.

Minimum Data Collection

Sms123 only collects data that is strictly necessary to deliver the services you request. We do not collect excessive information and do not retain data longer than required for the stated purposes.

256-bit SSL Encryption

All data transmitted between your device and sms123's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks. Your account information and transactions cannot be intercepted by any third party.

No Data Sales

Sms123 does not sell, rent, or share our members' personal data with any third party for marketing purposes. Your data belongs to you — we use it solely to deliver the sms123 services you signed up for.

Full Transparency

The sms123 Privacy Policy is written in clear, straightforward language that all Malaysian users can understand. We do not hide how we use your data behind confusing legal jargon — what you read is what we do.

You're in Control

You have the full right to access, correct, and request deletion of your personal data at any time. Data management requests are processed by the sms123 privacy team within 14 business days.

Data We Collect at sms123

A summary of the types of data collected, how it is collected, and how it is used on the sms123 platform.

Data Types Example Purpose of Use Legal Basis
Identity Data Full name, MyKad number, date of birth Identity verification (KYC), fraud prevention Legal obligations, legitimate interests
Contact Information Malaysian phone number, email address Account verification, notifications, customer support Contract fulfilment, consent
Financial Data EWallet information, bank account details, transaction history Processing deposits & withdrawals, fraud prevention Contract fulfilment, legal obligations
Gaming Data Betting history, games played, session duration Responsible gambling, service improvement Legitimate interests, legal obligations
Technical Data IP address, device type, browser, cookie data Platform security, usage analytics, fraud detection Legitimate interests, consent
Location Data Country/region based on IP, state (if provided) Verification of Malaysia service area, regulatory compliance Legal obligations, legitimate interests

1. Introduction

Welcome to the sms123 Privacy Policy. This policy is published by sms123 ("Platform", "we", "us") to inform all members and users ("you") about how we collect, use, store, and protect your personal data when you use the sms123 online entertainment platform at sms123.best.

Sms123 takes your privacy very seriously. We operate in full compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia — the primary legislation governing how companies in Malaysia handle individuals' personal information. By registering an account or using the sms123 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gambling Policy sms123. Together, these three documents form the complete agreement between you and our platform.

2. Personal Data We Collect

Sms123 only collects personal data that is necessary to deliver platform services safely and efficiently. The following are the categories of data we may collect:

Identity & Contact Data:

  • Full name as stated on your Malaysian identity card (MyKad or passport for permanent residents).
  • Malaysian identity card number or passport number.
  • Date of birth (for age verification of 18 and above).
  • An active Malaysian mobile phone number.
  • An active email address that you can access.
  • Malaysian residential address (required for certain verification processes).

Financial & Transaction Data:

  • Payment method details you have used — your Touch 'n Go eWallet username, GrabPay, Boost, ShopeePay, or your DuitNow and FPX account number (Maybank2u, CIMB Clicks).
  • A complete history of all deposits and withdrawals on the sms123 platform.
  • Current account balance.
  • Details of bonuses and promotions that have been used.

Usage & Technical Data:

  • The IP address of the device used to access sms123.
  • Device type (Android, iOS, laptop) and operating system version.
  • Browser type and version in use.
  • Login history including date, time, and approximate location based on IP.
  • Cookie and web tracker data for the purposes described in Section 8.

Game Activity Data:

  • A complete history of all sports bets, casino games, slots, and e-sports played on sms123.
  • Bet values, winnings, and losses for each session.
  • Time and duration of gaming sessions.
  • The limits you have set within the responsible gambling tools.

3. How We Collect Data

Sms123 collects your personal data through the following methods:

  • Direct Registration: When you complete the sms123 account registration form, you voluntarily provide us with your identity and contact details.
  • KYC Verification: When you submit identity verification documents (a copy of your MyKad, verification selfie) as part of the mandatory Know Your Customer process.
  • Financial Transactions: Every time you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other accepted payment method on sms123.
  • Platform Usage: Automatically as you use the sms123 platform — every login, every bet, and every interaction with a game or section of the platform is recorded as usage data.
  • Support Communications: When you contact the sms123 support team via LiveChat, WhatsApp, or email, the contents of that communication are retained for quality assurance and dispute resolution purposes.
  • Cookies & Tracking Technologies: Through cookies, web sessions, and similar tracking technologies used on the sms123.best website — see Section 8 for full details.

4. Purposes of Personal Data Processing

Sms123 processes your personal data only for lawful and specific purposes. We do not process your data for any purposes not stated here without first notifying you and obtaining your consent where required.

  • Service Delivery: To create and manage your account, process deposits and withdrawals via Malaysian eWallet and FPX, and enable access to all games and betting markets on sms123.
  • Identity Verification (KYC): To verify that you are an individual aged 18 or above and a legitimate Malaysian resident — fulfilling sms123's legal obligations under Malaysian gaming laws.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account usage, and any violations of sms123's Terms & Conditions.
  • Responsible Gambling: Monitoring gambling patterns to detect signs of problem gambling and enforcing the limits you have set for yourself within the sms123 platform.
  • Service Communications: To send important notifications regarding your account, transactions, policy changes, and security updates via SMS or email.
  • Marketing Communications: With your consent, to send information about sms123 promotions, bonuses, and the latest offers. You may withdraw this consent at any time through your account settings.
  • Platform Improvements: To analyse aggregated, anonymised usage data in order to improve the user experience, technical performance, and content of the sms123 platform.
  • Legal Compliance: To meet any legal and regulatory compliance requirements imposed on sms123 by the relevant authorities.

5. Disclosure of Data to Third Parties

Sms123 does not sell our members' personal data to any third party. However, there are limited situations where we may need to share certain information with selected third parties:

Service Providers (Data Processors):

Sms123 works with accredited third-party service providers to support platform operations. These include payment solution providers such as the FPX network, DuitNow, and Malaysian eWallet platforms; game hosting service providers such as Evolution Gaming for live casino tables; and cloud infrastructure service providers for secure data storage. All such providers are bound by strict data protection agreements and are only permitted to process your data for purposes we have specified.

Legal Requirements:

Sms123 may be required to disclose your personal data to the relevant authorities upon receipt of a valid court order, an official request from a Malaysian law enforcement agency, or where disclosure is necessary to prevent or detect serious crimes such as money laundering or fraud.

sms123 has never and will never sell, rent, or share our members' personal data with marketing companies, data brokers, or any commercial third party for marketing purposes without your explicit prior consent.

6. Data Security at sms123

Sms123 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption: All communications between your browser and sms123's servers are encrypted using 256-bit TLS/SSL — the highest security standard adopted by Malaysia's top financial institutions.
  • Stored Data Encryption: Sensitive data such as passwords and financial information is stored in encrypted form in sms123's databases. Your password is never stored as plain text.
  • Internal Access Controls: Only sms123 staff who require access to specific data in order to perform their duties are permitted to do so. Access is governed by strict role-based access controls (RBAC).
  • 24/7 Security Monitoring: The sms123 security monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
  • Regular Security Audits: The sms123 platform undergoes regular security audits by independent third parties to identify and address any potential vulnerabilities.
  • Two-Factor Authentication (2FA): sms123 offers two-factor authentication for your account as an added layer of security, and we strongly encourage you to enable it.

While sms123 takes all reasonable steps to protect your data, no security system is entirely impenetrable. You also play a role in keeping your account secure — do not share your password, and ensure your device is protected with a password or biometric authentication.

7. Data Retention Period

Sms123 does not retain your personal data for longer than necessary for the purposes set out in this Privacy Policy. Retention periods vary by data type:

  • Active Account Data: For as long as your account remains active on sms123, your identity and contact data is retained to enable you to use the platform.
  • Financial Transaction Records: Deposit and withdrawal history is retained for a minimum of 7 years in accordance with Malaysian financial and regulatory requirements.
  • Game Activity History: Gaming and betting records are retained for 5 years for responsible gambling purposes, dispute resolution, and regulatory compliance.
  • Communication Records: LiveChat logs, emails, and customer support communications are retained for 3 years for quality assurance, training, and dispute resolution purposes.
  • Technical Data (Server Logs): Technical logs including IP addresses and session data are retained for 12 months for security and technical troubleshooting purposes.
  • After Account Closure: Once your account is closed, most of your personal data will be deleted or anonymised within 30 days, except for data that must be retained to fulfil legal obligations such as financial records.

8. sms123 Cookie Policy

The sms123.best website uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We Use:

  • Essential Cookies (Required): These cookies are required for the core functionality of the sms123 platform — including maintaining your login session and ensuring transaction security. Without them, the platform cannot function properly. These cookies do not require your consent.
  • Performance Cookies (Analytics): Used to gather aggregated, anonymised information about how visitors use the sms123 platform — including the most frequently visited pages, navigation paths, and time spent. This information helps us improve the user experience.
  • Functional Cookies: Allows the platform to remember your preferences — such as your language (Bahasa Melayu), preferred odds format, and other display settings — to deliver a more personalised experience throughout your session.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the sms123 platform and you may be unable to log in or use certain features properly.

9. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by sms123:

Right of Access

You have the right to request a copy of the personal data sms123 holds about you. Requests will be processed within 14 business days.

Right to Rectification

If personal data held by sms123 about you is inaccurate or out of date, you have the right to request a correction.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.

Right to Restrict Processing

In certain circumstances, you may request that sms123 restrict the processing of your personal data while an issue is being resolved.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time through your sms123 account settings.

To exercise any of the rights above, please contact the sms123 privacy team at support@sms123.best with the subject line "Privacy Rights Request – [Request Type]". We will respond within 14 business days and may require identity verification before processing your request.

10. Children's Data

The sms123 platform is a service intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

Should we discover or be made aware that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on sms123, please contact us immediately at support@sms123.best so we can take appropriate action.

Sms123 applies a strict age and identity verification (KYC) process to enforce this minimum age requirement. Parents and guardians are responsible for ensuring that minors in their care do not access the sms123 platform.

11. Cross-Border Data Transfers

In the course of its operations, sms123 may need to store or process your personal data on servers located outside Malaysia — particularly for cloud infrastructure services and international game providers such as Evolution Gaming, which supplies live dealer tables for the sms123 platform.

In such cases, sms123 ensures that any cross-border data transfers are carried out in compliance with Malaysia's PDPA and with adequate safeguards to protect your rights as a data subject. This includes ensuring that service providers outside Malaysia who handle your data are bound by data processing agreements that meet protection standards equivalent to or higher than those required in Malaysia.

Financial data related to transactions made using local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX is processed in accordance with the security framework established by Bank Negara Malaysia and the respective payment providers.

12. Amendments to This Privacy Policy

Sms123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes occur, we will notify you via:

  • An in-platform notification on sms123 the next time you log in after changes have been made.
  • To the email address you registered, at least 7 days before changes take effect for any material updates.
  • Update the "Updated" date and version number at the top of this document.

Your continued use of the sms123 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated version. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact the sms123 Privacy Officer

If you have any questions, concerns, or complaints regarding how sms123 handles your personal data, or if you wish to exercise any of your rights under the PDPA, please contact us via:

  • Privacy Email: support@sms123.best — use the subject line "Privacy" or "PDPA" to ensure your enquiry reaches the right team. We will respond within 2 hours during operating hours.
  • LiveChat 24/7: Available on the sms123 platform for general enquiries related to your account's privacy and data security.
  • WhatsApp Support: For privacy issues requiring urgent attention, such as suspected data breaches or unauthorised access to your account.

For formal complaints relating to personal data processing that cannot be satisfactorily resolved through sms123's support channels, you also have the right to refer your complaint to the Department of Personal Data Protection Malaysia (JPDP), which is the PDPA regulatory body in Malaysia.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (Act 709) and the regulations made under it.

How sms123 Handles Your Privacy Request

A clear and transparent process for exercising your privacy rights at sms123.

1
Submit Request

Contact sms123 by email at support@sms123.best, stating the type of privacy request you are making – access, rectification, erasure, or otherwise.

2
Identity Verification

The sms123 privacy team will contact you to verify your identity, ensuring the request is being made by the genuine account holder.

3
Request Processing

Once your identity has been verified, sms123 will process your request and assess whether it can be fulfilled in full or is subject to any legal limitations.

4
Response Within 14 Days

Sms123 will provide a written response within 14 business days with the outcome of your request and any action taken or to be taken.

Understanding Data Privacy at sms123 – A Malaysian Player's Perspective

If you have ever heard about data breaches at major companies and felt uneasy about sharing your personal information when signing up for any online platform — that concern is completely valid, and sms123 understands it. This is where we want to be open and transparent about exactly what we do with your data.

When you register a sms123 account and submit your MyKad number for the KYC process, that data is not stored in a simple spreadsheet on someone's computer. It is held in an encrypted database system protected by multi-layered security protocols. Your MyKad number is used for one purpose only — to verify that you are who you claim to be and that you are 18 years of age or older. Nothing more.

Why sms123 Needs Your Payment Information

When you make a deposit using Touch 'n Go eWallet, GrabPay, or DuitNow at sms123, our system records that transaction — including the amount, date and time, and payment method used. This is not about invasively monitoring your spending habits. It is a basic requirement for two reasons. First, when you request a withdrawal, we need to know where to send the funds and verify that it is going to a legitimate account in your name. Second, Malaysian financial regulations require platforms like sms123 to maintain transaction records for compliance and anti-money laundering purposes.

Important to know: sms123 does not store your full eWallet account number or payment authentication details in any form that could be used to carry out transactions without your authorisation. All payment data is protected with strict encryption, and access to it is highly restricted — even among sms123 staff.

Gaming Data & Responsible Gaming

Sms123 keeps a complete record of your gaming activity — every bet you place on the Malaysia Super League, every live blackjack session, every slots spin. Most players never stop to wonder why. The answer serves two purposes: your protection and ours.

From a player protection standpoint, your gaming history allows the sms123 system to detect patterns that may indicate a gambling problem — such as a sudden spike in bet amounts, repeatedly chasing losses, or very long play sessions in the early hours of the morning. This enables sms123 to reach out to members who may need support before an issue escalates. From our own protection standpoint, gaming records allow us to resolve any disputes over game outcomes or winnings accurately and fairly.

PDPA Questions & Your Rights as a Malaysian Player

PDPA 2010 is Malaysian legislation that gives you real rights over your personal information. This is not merely a technical provision — it means that if you want to know what data sms123 holds about you, you can request it and we are obliged to provide it. If any information is inaccurate — such as an old phone number or a changed address — you have the right to request a correction and we are obliged to make it.

Most importantly, in the context of a gambling platform: the right to withdraw consent for marketing communications. If you no longer wish to receive SMS or email messages about sms123 promotions, you can unsubscribe at any time via the link in any of our emails or through your account settings. We will not continue sending you marketing messages after you withdraw your consent. This is your right, and sms123 respects it fully.

Your Privacy Fully Protected

Sms123's commitment to data protection goes beyond legal compliance — it is a core value.

PDPA 2010 Compliant SSL 256-bit Encryption No Data Sales 24x7 Privacy Support Touch 'n Go & DuitNow FPX & Maybank2u Encrypted Data 92,000+ Trusted Members

Games Responsible

Sms123 uses game activity data to protect the wellbeing of every member — not to exploit you.

Proactive Monitoring

Your gaming data at sms123 is used to identify signs of problematic play at an early stage. Our system is designed to protect you — if any indicators of concern arise, our team will proactively reach out to you with appropriate support information.

Limits You Control

Set deposit limits, loss limits, and session time limits within your sms123 account. These limits are enforced using your activity data and cannot be overridden — not even by the sms123 team itself. Full control stays with you.

18+ & Further Assistance

The sms123 platform is intended for individuals aged 18 and above. For a full guide on responsible gambling and available support resources, visit the Responsible Gambling page us.

Play with Safe & Confident at sms123

Your data is protected, your privacy is respected, and your winnings are paid out. Register for free today and enjoy Malaysia's best online entertainment.

For adult players aged 18 and above only • Data protected under PDPA 2010 • Terms & Conditions applicable

Bahasa Melayu