W 138 Privacy Policy – Protecting the Personal Data of Our Malaysian Members

This Privacy Policy is issued by W 138 (w138.world) and applies to all users, visitors, and registered members of the W 138 platform. This document explains how we collect, process, store, and — in limited circumstances — disclose your personal information when you use W 138's services.

W 138 is an online gaming platform operating exclusively for the Malaysian market, offering a wide range of entertainment including slots, Live Casino, blackjack, poker, and Sports Betting covering the Malaysia Super League, EPL, badminton, e-sports, cricket, and more. In delivering these services, we process certain personal data of our members as part of our platform operations.

By registering an account or using any part of the W 138 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use and contact us for assistance.

W 138 collects the personal data necessary to operate the platform securely and deliver the best experience to members. The types of data we collect are as follows:

We only collect data that is strictly necessary for the stated purposes. W 138 does not collect sensitive data categories such as health information, religious beliefs, or political affiliations unless required by law.

The personal data we collect is used solely for legitimate purposes directly related to operating the W 138 platform and delivering services to members. Below is the full list of purposes for which your data is used:

• Account Registration & Management – To create, verify, and manage your W 138 account, including the KYC process required to fulfil our legal obligations.
• Financial Transaction Processing – To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, as well as your winnings withdrawals.
• Game and Betting Operations – To record gaming activity, ensure betting integrity, and calculate wins or losses accurately and transparently.
• Security and Fraud Prevention – To detect and prevent fraud, money laundering, the use of multiple accounts, and activities that violate W 138's terms.
• Service Communications – To send important information about your account, including transaction confirmations, security notifications, and service updates.
• Marketing Communications (with consent) – To send you promotional offers, bonuses, and updates on new games – only where you have given your consent, which may be withdrawn at any time.
• Legal Compliance – To comply with applicable legal obligations, regulations, and directives from relevant authorities governing W 138's operations.
• Platform Improvements – To analyse usage patterns and improve the products, features, and user experience on W 138.

W 138 does not sell, rent, or trade members' personal data to any third party for marketing or unrelated commercial purposes. However, there are limited circumstances in which W 138 may share your data with the following parties:

• Payment Service Providers – E-wallet and banking providers (such as those handling Touch 'n Go eWallet, GrabPay, Boost, DuitNow, Maybank2u, CIMB Clicks) for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game Software Providers – Licensed game providers such as Pragmatic Play and Evolution Gaming may receive session data necessary to operate their games. No directly identifiable personal information is shared.
• Authorities and Law Enforcement – When required by court order, applicable law, or a valid request from Malaysian authorities, W 138 will comply and disclose the necessary data.
• Analytics and Security Services – Technology providers that help us detect fraud and analyse platform usage — all using anonymised data or bound by strict data processing agreements.

W 138 continually invests in the latest security technologies and procedures to ensure that members' personal data remains protected at all times. The following are the key security measures we have implemented:

• 256-bit SSL Encryption – All communications between your device and W 138's servers are encrypted using 256-bit TLS/SSL, ensuring no third party can intercept or read data in transit.
• Layered Access Controls – Only authorised W 138 staff with the minimum required access level may access member data. All access is logged and audited.
• 24/7 Monitoring – Automated monitoring systems operate around the clock to detect any unusual activity or attempted intrusions on member data.
• Two-Factor Authentication (2FA) – Members are encouraged to enable 2FA to add an extra layer of protection to their W 138 account.
• Regular Security Audits – W 138 conducts regular internal and external security audits to identify and address any potential vulnerabilities.
• Incident Response Procedure – W 138 has a tested incident response plan to ensure that any data breach can be identified, contained, and reported to the relevant parties promptly.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We encourage members to use strong passwords, enable 2FA, and promptly report any suspicious activity to the W 138 support team.

The W 138 platform uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain the security of your login session. The following are the types of cookies we use:

• Session Cookies – Required to maintain your login session while using the W 138 platform. These cookies are automatically deleted when you close your browser.
• Preference Cookies – Saves your preferences such as language, display theme, and platform settings for a smoother experience on your next visit.
• Security Cookies – Helps verify the identity of legitimate users and protects accounts from unauthorised access and CSRF attacks.
• Analytics Cookies – Collects aggregated data on how users interact with the W 138 platform, helping us improve the platform's design and features.

You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the W 138 platform, including your ability to remain securely logged in.

As a W 138 member and as a data subject under recognised data protection principles, you have the following rights regarding your personal data held by W 138:

W 138 retains your personal data only for as long as necessary for the purposes set out in this policy, or as required by applicable law. The following are our general data retention guidelines:

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to you as an individual. The deletion process follows procedures that comply with industry security standards.

W 138 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or the way we handle data. Whenever the Privacy Policy is updated, the latest revision date will be displayed at the top of this document.

For significant or material changes, W 138 will endeavour to notify members via in-platform notifications or email to their registered address. Nonetheless, it remains the member's responsibility to review this Privacy Policy periodically.

Continued use of the W 138 platform after any changes are published will be deemed acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to discuss your options, including closing your account.

If you have any enquiries, concerns, or complaints regarding how W 138 handles your personal data, or wish to exercise any of the privacy rights outlined in this policy, please contact us through the following channels:

• Privacy & Data Email: support@w138.world (Please use the subject line: "Data Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week on the W 138 platform
• Frequently Asked Questions: W 138 FAQ Page
• Terms & Conditions: Read W 138 Terms & Conditions
• Responsible Gaming: Responsible Gambling Page
• About Us: Learn more about W 138

W 138 is committed to responding to all privacy-related enquiries within 14 business days. For more complex issues requiring in-depth investigation, we will notify you within that timeframe and provide a more accurate estimated resolution time.