W138 Core Privacy Principles
Personal Data Encryption
All your personal data is encrypted using 256-bit SSL technology at all times — whether in transit or stored on our servers. No external party can access your information.
Data Is Never Sold
W138 does not sell, rent, or trade users' personal information to any third party for marketing or commercial purposes. Your data belongs entirely to you.
Malaysia PDPA Compliance
The w138 privacy policy is designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all local legal requirements in the handling of personal data.
Full Control in Your Hands
You have the right to access, correct, and request the deletion of your personal data at any time. w138 provides easy channels for you to manage your own information.
Transparent Cookies
We use cookies solely for technical and user experience purposes — not to monitor your activity outside the platform. You can manage your cookie settings through your web browser.
Data Breach Notification
In the event of any security incident involving your data, w138 is committed to notifying affected users within the timeframe required by applicable law.
01Introduction and Scope of Privacy Policy
Welcome to the w138 Privacy Policy page. This document explains in detail how w138 ("we", "Platform") collects, processes, stores, and protects your personal information ("User") when you use our online gaming platform at w138.vu or through our official mobile app.
We understand that privacy is a deeply personal and sensitive matter. Your trust in us is the foundation of the relationship we build together. We are therefore committed to always handling your personal data with integrity, transparency, and responsibility — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.
This Privacy Policy applies to all w138 platform users regardless of access method — whether via a web browser on a personal computer, smartphone, tablet, or mobile app. By using our platform, you acknowledge that you have read and understood this policy.
Note: This Privacy Policy should be read together with the w138 Terms and Conditions. Both documents form the complete agreement between you and the w138 platform.
02Personal Information We Collect
W138 collects your personal information through various means depending on how you interact with our platform. The following are the categories of information we may collect:
Information You Provide Directly:
- Full name as stated in your official identification document.
- National identification number (MyKad) or passport number.
- Date of birth for age verification.
- Active email address and mobile phone number.
- Bank account details including bank name, account number, and account holder name.
- E-wallet details such as the phone number registered with Touch 'n Go, GrabPay, or Boost.
- KYC supporting documents such as identity card photos and verification selfies.
Automatically Collected Information:
- IP address and general location information based on IP.
- Device type, operating system, and web browser version.
- Login data and session timestamps.
- In-platform gaming activity history and transaction records.
- Cookie data and device identifiers.
Attention: We only collect information that is genuinely necessary to provide our services. We do not collect information beyond what is stated in this policy.
03How We Use Your Information
The personal information we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:
- Account Management: Creating, verifying, and managing your user account on the w138 platform.
- Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
- KYC Verification: Meeting identity verification and anti-money laundering (AML) requirements mandated by law.
- Platform Security: Detecting and preventing fraud, account abuse, and other unlawful activities.
- Customer Support: Providing technical assistance and effectively resolving your complaints or enquiries.
- Service Communications: Sending important notifications related to your account, transactions, and policy updates.
- Platform Improvements: Analysing usage patterns in aggregate and anonymised form to enhance the user experience.
- Legal Compliance: Fulfilling legal obligations, court orders, or requests from lawful authorities.
Our Guarantee: w138 does not use your personal data for any third-party marketing purposes or commercial activities unrelated to the services we provide to you.
04Information Sharing and Disclosure
W138 does not sell or transfer your personal information to third parties without your consent, except in the following limited and strictly controlled circumstances:
- Payment Service Providers: Approved payment gateways require certain information to process your financial transactions. They are bound by strict confidentiality agreements.
- Technical Service Providers: Technical partners who support platform operations — such as cloud services and data hosting providers — are bound by strict data protection agreements.
- Legal Requirements: We may need to disclose your information if required by law, court order, or directive from a legitimate authority.
- Interest Protection: Under certain circumstances to prevent fraud, money laundering, or to protect the safety of other users and the platform.
All third parties we work with are required to comply with data protection standards equal to or stricter than our own. They are only permitted to use your data for agreed purposes.
05Data Security Measures
Protecting your personal data is our absolute priority. w138 continually invests in the latest security infrastructure to ensure your information remains safe at all times:
- 256-bit SSL Encryption: All communication between your browser and our servers is encrypted using the latest TLS protocol, ensuring no third party can intercept your data in transit.
- Stored Data Encryption: Sensitive data such as banking information and identification numbers are fully encrypted in our database.
- Two-Factor Authentication (2FA): Users are encouraged to enable 2FA for an additional layer of security during login.
- Continuous Monitoring: Our security systems operate 24/7 to detect and respond to any security threats.
- Internal Access Controls: Only authorised staff may access user data, and every access is logged and audited regularly.
- Security Testing: Our platform undergoes regular penetration testing by independent security experts.
Security Reminder: While we take all reasonable measures, no online system can be guaranteed 100% secure. You also play an important role by keeping your account password confidential.
06Cookie Policy
Cookies are small text files stored on your device when you visit the w138 platform. We use cookies for the following purposes:
- Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
- Performance Cookies: Helps us understand how users interact with the platform for technical improvement purposes. Data is collected anonymously.
- Functional Cookies: Remembering your preferences such as display settings and game preferences for a more personalised experience.
You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the w138 platform.
Notice: w138 does not use third-party cookies for advertising or cross-site tracking purposes. Our cookies operate exclusively within the scope of the w138 platform.
07User Rights Over Personal Data
As a w138 user, you have the following rights regarding your personal data under Malaysia's PDPA and data protection best practices:
| User Rights | Description | How to Claim |
|---|---|---|
| Right of Access | You have the right to request a copy of the personal data we hold about you. | Contact customer support |
| Right to Rectification | You have the right to correct any inaccurate or incomplete information. | Via account settings or support |
| Right to Erasure | You may request the deletion of your personal data, subject to legal requirements. | Contact customer support |
| Right to Restriction | You may request that we restrict the processing of your data under certain circumstances. | Email our privacy team |
| Right to Object | You may object to the processing of your data for specific purposes not required by law. | Contact customer support |
| Right to Portability | You may request your data in a machine-readable format for transfer to another platform. | Email our privacy team |
All data rights requests will be processed within 30 business days from the date a complete request is received. We may need to verify your identity before processing any request in order to protect your data security.
08Data Retention Period
W138 retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy, or as required by applicable law.
- Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure for investigation or dispute purposes.
- Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
- KYC Documents: Retained for a minimum of 5 years from the date of last verification in accordance with AML requirements.
- Activity & Security Logs: Retained for 2 years for security monitoring and dispute resolution purposes.
- Cookie Data: Session cookies are deleted when you close your browser; persistent cookies expire after a set period.
Once the retention period expires and there is no legal obligation to retain the data further, w138 will securely delete or anonymise your data using industry-recognised methods.
09Links to Third-Party Websites
The w138 platform may occasionally display information relating to service partners. However, we do not include outbound links to external websites within our main platform.
If you access any third-party services integrated with the w138 platform — such as payment gateways during transactions — please note that those services operate under their own privacy policies, separate from w138's.
Attention: w138 is not responsible for the privacy practices of any third party. Please review the privacy policy of each third-party service provider separately if you use their services.
10Protection of Children's Information
The w138 platform is strictly for individuals aged 18 and above. We do not knowingly collect or store any personal information from children or minors.
Should we discover that personal information from a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who find that their child has registered on our platform are urged to contact our support team immediately.
11Privacy Policy Amendments
W138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable legislation, or improvements to the services we offer.
Whenever this Privacy Policy is amended in a material way, we will notify you via an in-platform notification or email to your registered address. The "Updated" date at the top of this page will always reflect the latest version in effect.
Best Practices: We recommend reviewing this Privacy Policy page regularly — at least once every three months — to ensure you are always informed of how we handle your personal data.
12Contact Our Privacy Team
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 via the chat icon on the w138 platform — the fastest way to get an immediate response.
- Privacy Email: [email protected] — for specific enquiries relating to data protection and user rights.
- General Support: [email protected] — for general enquiries and technical support.
- FAQ: Visit the FAQ us for quick answers to common questions.